# changelog

author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-6
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/
  - Wait for daemon ends
    Resolves: #1072958


author: Honza Horak <hhorak@redhat.com> - 5.5.37-9
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> - 5.5.40-10
changelog:
  - Rebase to 5.5.40
    https://kb.askmonty.org/en/mariadb-5540-changelog/
    Also fixes: CVE-2014-4274 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6505 CVE-2014-4287 CVE-2014-6551 CVE-2014-6555 CVE-2014-6484
    CVE-2014-6464 CVE-2014-6559 CVE-2014-6530 CVE-2014-6564 CVE-2014-6469
    CVE-2014-6463
    Resolves: #1160550


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-11
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186116


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fix: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
    CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582
    CVE-2015-2620 CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 
    Resolves: #1247027


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.49-1
changelog:
  - Rebase to 5.5.49
    https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/
    Resolves: #1342454


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-1
changelog:
  - Fixed systemd service PIDFile setting (#1231269)
  - Temporarily disable WiredTiger (FPC request to bundle it)
  - Enable c++11 (MongoDB requires it since 3.0.5)
  - Upgrade to version 3.0.6


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-2
changelog:
  - Enable bundled WiredTiger
    (FPC ticket - https://fedorahosted.org/fpc/ticket/562,
     upstream discussion - https://groups.google.com/forum/#!topic/mongodb-dev/31FQSo4KVCI)


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-9
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207170


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.25-1
changelog:
  - Rebase to version 10.0.25
    Resolves: #1330445
    Also fixes: CVE-2016-2047 CVE-2016-0668 CVE-2016-0666 CVE-2016-0655
    CVE-2016-0651 CVE-2016-0650 CVE-2016-0649 CVE-2016-0648 CVE-2016-0647
    CVE-2016-0646 CVE-2016-0644 CVE-2016-0643 CVE-2016-0642 CVE-2016-0641
    CVE-2016-0640 CVE-2016-0616 CVE-2016-0610 CVE-2016-0609 CVE-2016-0608
    CVE-2016-0606 CVE-2016-0600 CVE-2016-0598 CVE-2016-0597 CVE-2016-0596
    CVE-2016-0546 CVE-2016-0505 CVE-2015-7744 CVE-2015-4913 CVE-2015-4895
    CVE-2015-4879 CVE-2015-4870 CVE-2015-4861 CVE-2015-4858 CVE-2015-4836
    CVE-2015-4830 CVE-2015-4826 CVE-2015-4819 CVE-2015-4816 CVE-2015-4815
    CVE-2015-4807 CVE-2015-4802 CVE-2015-4792


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.26-1
changelog:
  - Rebase to version 10.0.26
    Resolves: #1359868
    Also fixes: CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440


author: Michal Schorm <mschorm@redhat.com> - 1:10.0.28-5
changelog:
  - Rebase to 10.0.28
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - Tests blacklist updated
    Related: #1393306, #1396945
    Also fixes: CVE-2016-3492 CVE-2016-5612 CVE-2016-5616 CVE-2016-5624
                CVE-2016-5626 CVE-2016-5629 CVE-2016-5630 CVE-2016-6662
                CVE-2016-6663 CVE-2016-8283


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Mat Booth <mat.booth@redhat.com> - 1.2.9-8
changelog:
  - Fix unstripped binaries and empty debuginfo package
  - Ensure presence of ant-junit at buildtime
  - Fixed mixed use of space and tabs


author: Mat Booth <mat.booth@redhat.com> - 2.0.17-18
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about subtracting
    one from an index value.


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.1-6
changelog:
  - Increase minimum memory for Eclipse/devstudio
  - Enable nashorn extension for javascript tools/devstudio
  - Resolves: rhbz#1380438


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.2-1
changelog:
  - Update to Neon.2
  - Bootstrap build due to ant update
  - Port to new ant version
  - Rebuild for ECF update
  - Pull in usage plugin by default


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.2-3
changelog:
  - Drop dep on javax.annotation APIs, these should instead be provided by the JRE
    through the system bundle - rhbx#1392150


author: Mat Booth <mat.booth@redhat.com> - 1:5.1.2-1
changelog:
  - Update to release 5.1.2
  - Remove bundled third-party libs rhbz#1339362
  - Fix valid encoding detection failure rhbz#1327642
  - Improve system jython integration
  - Make symlinking jars more portable


author: Mat Booth <mat.booth@redhat.com> - 1:9.1.0-1
changelog:
  - Update to Neon.1 release
  - Fix bootstrapping modes
  - Fix binary stripping and permissions on native libraries
  - Fix build on ppc64le


author: Mat Booth <mat.booth@redhat.com> - 9.0.2-2
changelog:
  - Backport patch to compensate for API changes in CDT
  - Use global instead of define for macros
  - Increase max heap used in build for arm


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251466


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <rcollet@redhat.com> - 3.1.15-0.4.20140912
changelog:
  - upstream has switched from SVN to GIT
  - disable shm_strings_buffer in provided configuration
  - fix segfault when Zend Opcache is ebabled #1052178


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.16-20
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.40-2
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Do not change the string arg in XS, use copy instead (CPAN RT#96893)
    - Add README make target
    - Add more distribution metadata
  - This release by ETHER → update source URL
  - Update debugger patch (CPAN RT#96893)
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Copy the contents of the %DB::sub entry if it exists; fixes
      Devel::NYTProf's anon sub handling (CPAN RT#50524)
  - Drop upstreamed debugger patch
  - Drop EL-5 compatibility since we need Devel::CheckBin, which can't be
    built for EPEL-5 or EPEL-6


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Move variable declaration to fix warning under
      -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3)
    - Converted distribution packaging to Dist::Zilla
    - Fix licence in LICENSE and pod
  - Package new upstream CONTRIBUTING and LICENSE files
  - Classify buildreqs by usage


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Skip pairmap()'s MULTICALL implementation 5.8.9/5.10.0 as it doesn't work
      (CPAN RT#87857)
    - Comment on the fact that package "0" is defined but false (CPAN RT#88201)
    - TODO test in t/readonly.t now passes since 5.19.3 (CPAN RT#88223)
    - Added any, all, none, notall list reduction functions (inspired by
      List::MoreUtils)
    - Added List::Util::product()
    - Added Scalar::Util::unweaken()
    - Avoid C99/C++-style comments in XS code
    - Fix dualvar tests for perl 5.6; fix skip() test counts in dualvar.t
    - Neater documentation examples of other functions that can be built using
      reduce
    - Implement reduce() and first() even in the absence of MULTICALL
    - Various documentation changes/updates
    - Correct uses of overload operators in unit tests (CPAN RT#91969)


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Paul Howarth <paul@city-fan.org> - 0.402-1
changelog:
  - Update to 0.402 (significant and slightly incompatible update - see Changes)
  - This release by REHSACK → update source URL
  - Classify buildreqs by usage
  - Modernize spec as this isn't going to anywhere older than F-22


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.8-3.20130221svn1448242
changelog:
  - own include directories in -devel subpackage (#1079938)
  - depend on httpd-2.4 in -devel subpackage


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-1
changelog:
  - Initial commit with git v2.9.2
  - Fixes troubles with infinite loop in "git ls-tree" for broken symlink
    under refs/heads
  - Rename git.service to git@.service to make it usable
  - Resolves: #1204191 #1251460


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-5
changelog:
  - fix service file to use rh-git29 instead of native git
  - fix desktop file - changed names & paths inside the file,
      use scl rh-git29 instead of native git, change filename
      and path of the file to system directory instead of scl
  - *git-daemon: xinetd.d: use system directory and added prefix to the filename
  - *git-gitweb: store git.conf to directory of httpd24 sclm add scl prefix
      to the filename and correct paths inside the file to correct rh-git29
      www directory
  - fix doubled path for emacs-sitelisp files
  - build and link files with httpd24-libcurl
    Resolves: #1345897


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-1
changelog:
  - Rebase to 2.9.3
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1359176 #1382708


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-3
changelog:
  - prevent command injection via malicious ssh URLs
  - dissalow repo names beginning with dash
    Resolves: CVE-2017-8386 CVE-2017-1000117


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-5
changelog:
  - Rename the patch for test imports to be the same as in RHEL 6 branch.
  - Fix failure in fips mode if index name is too long.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python34/root/usr/lib64/python3.4/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Honza Horak <hhorak@redhat.com> - 2.6.7-9
changelog:
  - Remove NFS register feature for questionable usage for DBs
  - Allow to skip tests during build
  - Simplify few SCL macros


author: Marek Skalicky <mskalick@redhat.com> 2.6.9-1
changelog:
  - Correct SELinux type for slc-helper script 
    Resolves: #1202013
  - Fix mongodb user HOME (Resolves: #1206157)
  - Upgrade to latest minor release 2.6.9 (Resolves: #1207118)


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.7-10
changelog:
  - do not install .orig file generated by make xs_generate
  - filter unversioned mod_perl.so from provides


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.1.4-1
changelog:
  - Security update (https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/)
  - Fixes RHBZ#1463132 and RHBZ#1469706


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.3.0-1
changelog:
  - Update to 8.3.0
  - update V8 to 6.0
  - update libuv to 1.13.1
  - add bundled provides for npm modules
  - enable aarch64 builds


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Tomas Orsava <torsava@redhat.com> - 3.12-1
changelog:
  - Updated to the current Fedora version
  - Removed Patch 0 as it is already patched in 3.12:
    http://pyyaml.org/ticket/247


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python36/root/usr/lib64/python3.6/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-12
changelog:
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the rh-python35-build
    subpackage here to the python-devel subpackage where it should be for
    dependant collections to build properly
  - Also defined the 2 macros in this spec file so they are available during the
    build of Python itself
  Resolves: rhbz#1422346


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-1
changelog:
  - Updated to the latest Fedora version 3.4.0
  - Renumbered Patch 1 to 2 to be in line with Fedora
  - Added Patch 1 from Fedora that fixes CVE-2013-7440 and CVE-2013-2099
  - Added Patch 3 from upstream for tests to pass without an active mongodb;
    We can't test pymongo with a running database like in Fedora, because in
    RHEL/RHSCLs it's packaged as a separate collection
  - Removed BuildRequires: python-nose as the test suite isn't using it any more


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-2
changelog:
  - Removed the commented out filter macros at the top of the specfile.
    While they were commented out, they still took effect since the macros still
    expanded. However, they were causing error messages in the buildlog [0] and
    causing the provides/requires generator script not to finish. Thus the
    packages were missing some of the required Provides and Requires tags.
    [0] warning: Ignoring invalid regex ^%{_scl_prefix}/.*$|%{_root_sysconfdir}/rpm/macros.rh-python36-config$
       (% signs were doubled to avoid rpm-lint warnings)


author: Remi Collet <rcollet@redhat.com> - 1.3.0-1
changelog:
  - release 1.3.0 (beta)
  - use system json-c when available (fedora >= 20)
  - use jsonc name for module and configuration


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.5.20-1
changelog:
  - rebase to PHP 5.5.20 #1057089
  - fix package name in description
  - php-fpm own session and wsdlcache dir
  - php-common doesn't provide php-gmp


author: Remi Collet <rcollet@redhat.com> - 5.5.21-2
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib64/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-8
changelog:
  - Fix memory leak in gdbm module (rhbz#977308)
  - Make building depending collections on top of python33 easier
  - Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-9
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-13
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-14
changelog:
  - Addendum for the Fix for CVE-2016-0772 (rhbz#1303647)
    In this version of Python, smtplib has 644 permissons, not 755,
    thus I modified the patch to expect this and not adjust the permissons.
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-15
changelog:
  - Addendum for the Fix for CVE-2016-5699 (rhbz#1303699)
    Python 3.3 does not yet have functions fullmatch and subTest,
    the patch was rewritten accordingly
  Resolves: rhbz#1346359


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Tomas Orsava <torsava@redhat.com> - 3.6-3
changelog:
  - Moved the license text to %doc due to %license macro not working properly
    in RHSCLs with respect to package uninstallation. (rhbz#1334670)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-10
changelog:
  - Modified patch so tests can acknowledge the existense or lack
  of SSLv2 support
  Resolves: rhbz#1319703


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-12
changelog:
  - Modified 00224-pep476-add-toggle-for-cert-verify.patch to use certificate verification
  config file from python27 SCL directory.
  Resolves: rhbz#1111464


author: Tomas Orsava <torsava@redhat.com> - 2.7.8-15
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-10
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: DJ Delorie <dj@redhat.com> - 0.7.91-15
changelog:
  Jeff Law <law@redhat.com>
  - Pull in fc24 patches
  - Remove local patch #204
  - Sync BuildRequires and %build with Fedora to fix aarch64 problem
  - Add missing #includes to some aarch64 code


author: DJ Delorie <dj@redhat.com> - 0.7.91-17
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Update to elfutils 0.166 (#1322412)
    Drop upstreamed patches:
    - elfutils-0.165-elf-libelf.patch
    - elfutils-0.165-nobitsalign-strip.patch


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Update to elfutils 0.167 (#1366182,#1356263)
    Drop upstreamed patch: elfutils-0.166-elfcmp-comp-gcc6.patch


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-26
changelog:
  - Rebase against fedora package:
    - Only build valgrind-openmpi when not creating a software collection.
    - No support for multilib on secondary arches when creating scl.
    - Mandatory Perl build-requires added
    - Add valgrind-3.11.0-shr.patch
    - Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch
    - Update valgrind-3.11.0-wrapmalloc.patch
    - Add valgrind-3.11.0-sighandler-stack.patch
    - Update valgrind-3.11.0-ppoll-mask.patch (#1344082)
    - Add valgrind-3.11.0-arm64-handle_at.patch
    - Add valgrind-3.11.0-ppc64-syscalls.patch
    - Add valgrind-3.11.0-deduppoolalloc.patch
    - Add valgrind-3.11.0-ppc-bcd-addsub.patch
    - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch
    - Update valgrind-3.11.0-cxx-freeres.patch (x86 final_tidyup fix)
    - Add valgrind-3.11.0-s390x-risbgn.patch
    - Add valgrind-3.11.0-cxx-freeres.patch (#1312647)
    - Add valgrind-3.11.0-ppc64-separate-socketcalls.patch
    - Add valgrind-3.11.0-isZeroU.patch
    - Replace valgrind-3.11.0-arm64-ldpsw.patch with upstream version


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.1-BETA1
changelog:
  - Update to valgrind 3.12.0 pre-release.
    - Drop upstreamed patches.
    - Disable exp-tests in %check. GDB crashes on gdb_server tests.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.2-BETA1
changelog:
  - Add valgrind-3.12-beta1-ppc64be.patch. (#1378963)
  - Enable gdb_server tests again. (#1378143)
  - And disable it again on rhel6 (both i686 and x86_64)
    and rhel7 (ppc64 and ppc64le only) (#1380513)


author: Jakub Jelinek <jakub@redhat.com> 6.1.1-5
changelog:
  - update from Fedora 6.1.1-5
  - make sure to use DTS strip and objdump during brp scripts (#1365531,
    - use DTS binutils even on RHEL7


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-2.2
changelog:
  - update from Fedora 6.3.1-2
  - some further libstdc++_nonshared.a fixes for ppc, ppc64, ppc64le, s390
    and s390x


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-3
changelog:
  - update from Fedora 6.3.1-3
    - fix vec_xl and vec_xst altivec.h intrinsics (#1418397, PR target/79268)


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Nick Clifton <nickc@redhat.com> 2.27-1
changelog:
  - Rebase on FSF binutils 2.27 release. (#1356661)
  - Retire: binutils-2.20.51.0.10-copy-osabi.patch
  - Retire: binutils-2.23.2-aarch64-em.patch
  - Retire: binutils-2.23.51.0.3-arm-ldralt.patch
  - Retire: binutils-2.23.52.0.1-revert-pr15149.patch
  - Retire: binutils-2.25.1-gold-testsuite-fixes.patch
  - Retire: binutils-2.25-kernel-ld-r.bugfix.patch
  - Retire: binutils-2.25-kernel-ld-r.patch
  - Retire: binutils-2.25-only-keep-debug.patch
  - Retire: binutils-2.25-x86_64-pie-relocs.patch
  - Retire: binutils-pr18879.patch
  - Retire: binutils-rh1224751.patch
  - Retire: binutils-rh1309347.patch
  - Retire: binutils-rh895241.patch


author: Nick Clifton <nickc@redhat.com> 2.27-3
changelog:
  - Version bump so that the Brew build can be rerun, this time including ppc64 (big-endian)
    (#1358353)


author: Nick Clifton <nickc@redhat.com> 2.27-6
changelog:
  - Move .shstrtab section to end of section list so that the monotonic ordering of section offsets is restored.
    (#1366145)


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Honza Horak <hhorak@redhat.com> - 5.7.11-1
changelog:
  - Update to 5.7.11
    Thanks to Norvald H. Ryeng
    Removing tar ball with boost and using mysql tar ball with boost bundled


author: Honza Horak <hhorak@redhat.com> - 5.7.15-1
changelog:
  - Update to MySQL 5.7.15, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html
    Resolves: #1376457
  - Adjust list of problematic tests from Fedora


author: Jakub Dorňák <jdornak@redhat.com> - 5.7.16-1
changelog:
  - Udate to MySQL 5.7.16, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html
    Resolves: #1376457


author: Mat Booth <mat.booth@redhat.com> - 1:4.1.0-2.4
changelog:
  - Add all necessary symlinks for jython
  - Don't bother users with upstream project fund-raising screen
  - rhbz#1251408


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.0-3.9
changelog:
  - Fix further ant version tests rhbz#1243711
  - Tighten up deps on junit/hamcrest
  - Build javadocs with java 8


author: Nick Clifton <nickc@redhat.com> 2.25-9
changelog:
  - Import patch from FSF to preserve the sh_link and sh_info fields in stripped ELF sections.
    (#1246390)


author: Patsy Franklin <pfrankli@redhat.com> 2.25.1-10
changelog:
  - Fix a case where the string was being used after the memory
    containing the string had been freed.


author: Marek Polacek <polacek@redhat.com> 5.2.1-1.1
changelog:
  - for DTS lib{l,t}san-devel require lib{l,t}san >= 5.1.1 (#1247146)
  - rename libgccjit to devtoolset-4-libgccjit; install libgccjit.so.* into
    /opt/rh/devtoolset-4/root/lib64/


author: Jakub Jelinek <jakub@redhat.com> 5.2.1-1.2
changelog:
  - split documentation out of devtoolset-4-libgccjit-devel package into
    devtoolset-4-libgccjit-docs (#1245102)
  - add 32-bit linker script and 32-bit gcc driver wrapper so that
    32-bit devtoolset-4-libgccjit{,-devel} can be used for linking
    and at runtime on x86_64 (#1245102)


author: Jakub Jelinek <jakub@redhat.com> 5.3.1-6
changelog:
  - update from Fedora 5.3.1-5 (#1305952)
  - include non-stripped copies of *.a libraries in the debuginfo subpackage


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-9
changelog:
  - dts3.1 merge from rhel-7.1
  - remove bodies of with_java, with_virtguest, with_virthost conditionals


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-13
changelog:
  - 3.10.1 Refresh.
    - Add valgrind-3.10.1-di_notify_mmap.patch
    - Add valgrind-3.10.1-memmove-ld_so-ppc64.patch
    - Add valgrind-3.10.1-kernel-4.0.patch.
    - Add valgrind-3.10.1-cfi-redzone.patch.
    - Add valgrind-3.10.1-memfd_create.patch.
    - Add valgrind-3.10.1-syncfs.patch.
    - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
    - Add valgrind-3.10.1-fno-ipa-icf.patch.
    - Add valgrind-3.10.1-demangle-q.patch
    - Add valgrind-3.10-1-ppc64-sigpending.patch
    - Filter out -fstack-protector-strong and disable _hardened_build.
    - Add valgrind-3.10.1-send-recv-mmsg.patch
    - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-glibc-version-check.patch
    - Add accept4 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-ppc64-accept4.patch.
    - Add valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10-s390-spechelper.patch.
    - Add valgrind-3.10.1-mempcpy.patch.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.11-60.fc24
changelog:
  - New Fedora GDB testfile: rhbz1261564-aarch64-watchpoint.exp
  - Backport gdb-7.11 stable branch PR gdb/19676 fix (Pedro Alves).


author: Mat Booth <mat.booth@redhat.com> - 9.0.0-1.3
changelog:
  - Disable optimisation that generates no-strict-overflow warning instead of
    simply disabling the warning


author: Petr Machata <pmachata@redhat.com> - 0.7.91-4
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)
  - Fix a couple nits in ltrace.1 (ltrace-0.7.91-man.patch)


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.14-1
changelog:
  - Fixed selinux policy
  - Update to 10.1.14 (includes various bug fixes)
  - Add -h and --help options to galera_new_cluster
    Resolves: #1333007


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-6
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Nick Clifton <polacek@redhat.com> 2.28-1
changelog:
  - Rebase to FSF binutils 2.28
  - Retire: binutils-2.23.52.0.1-addr2line-dynsymtab.patch
  - Retire: binutils-2.27-local-dynsym-count.patch
  - Retire: binutils-2.27-monotonic-section-offsets.patch
  - Retire: binutils-2.27-aarch64-relro-default.patch
  - Retire: binutils-2.27-power9.patch
  - Import FSF binutils patch to fix running readelf on debug info binaries.
  - Import FSF binutils patch to fix an abort with PowerPC dynamic relocs.
  - Backport patch to add support for putting name, comp_dir and
    producer strings into the .debug_str section. 
  - Add support for GNU BUILD NOTEs.


author: Nick Clifton <nickc@redhat.com> 2.28-6
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-3
changelog:
  - Related: #1055555 (add -scldevel subpackage for shipped build-requires garbage)
  - fix installed dirs permissions


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-5
changelog:
  - Resolves: #1075736 (initscript doesnt respect LSB)
  - Resolves: #1057097 (Use the same name for daemon and log file)
  - Resolves: #1075688 (metapackage shouldnt depend on another metapackage)
  - Resolves: #1075025 (Leftovers files after mongodb packages removal)


author: Paul Howarth <paul@city-fan.org> - 2:1.23-1
changelog:
  - Update to 1.23
    - Fixed several issues with the handling of non-integer values passed to
      from_epoch() (GH#11)
      - This method was simply broken for negative values, which would end up
        being incremented by a full second, so for example -0.5 became 0.5
      - The method did not accept all valid float values; specifically, it did
        not accept values in scientific notation
      - Finally, this method now rounds all non-integer values to the nearest
        millisecond, which matches the precision we can expect from Perl itself
        (53 bits) in most cases
    - Make all DateTime::Infinite objects return the system's representation of
      positive or negative infinity for any method that returns a number or
      string representation (year(), month(), ymd(), iso8601(), etc.); previously
      some of these methods could return "Nan", "-Inf--Inf--Inf", and other
      confusing outputs (CPAN RT#110341)


author: Paul Howarth <paul@city-fan.org> - 2:1.24-1
changelog:
  - Update to 1.24
    - The last release partially broke $dt->time; if you passed a value to use
      as unit separator, it was ignored (CPAN RT#112585)


author: Paul Howarth <paul@city-fan.org> - 2:1.25-1
changelog:
  - Update to 1.25
    - DateTime->from_object would die if given a DateTime::Infinite object; now
      it returns another DateTime::Infinite object (CPAN RT#112712)
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.27-1
changelog:
  - Update to 1.27
    - Added an environment variable PERL_DATETIME_DEFAULT_TZ to globally set the
      default time zone (GH#14); using this is very dangerous - be careful!
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2:1.28-1
changelog:
  - Update to 1.28
    - Fixed handling of some floating point epochs; since DateTime treated the
      epoch like a string instead of a number, certain epochs with a non-integer
      value ended up treated like integers (Perl is weird) (GH#15, fixes GH#6)


author: Paul Howarth <paul@city-fan.org> - 2:1.33-1
changelog:
  - Update to 1.33
    - When you pass a locale to $dt->set you will now get a warning suggesting
      you should use $dt->set_locale instead (CPAN RT#115420)
    - Added support for $dt->truncate( to => 'quarter' ) (GH#17)
    - Fixed the $dt->set docs to say that you cannot pass a locale (even though
      you can but you'll get a warning) and added more docs for $dt->set_locale
    - Require DateTime::Locale 1.05
    - Require DateTime::TimeZone 2.00
  - Take advantage of NO_PACKLIST option in recent EU:MM


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.9-6
changelog:
  - Fixed file conflict with others Perl SCLs
  - Update local path in default perl.conf
  - Resolves: rhbz#1227192, rhbz#1210621


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-8
changelog:
  - Register a collection into the httpd environment (bug #1382514)
  - Pass SCL environment to subprocesses (bug #1382514)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.035-3
changelog:
  - Remove using of iconv, because it is not needed (bug #1368046)
  - Fix default value for nossl option (bug #1366773)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.21-1
changelog:
  - Upstream update.
  - Reflect Attribute::Params::Validate having been dropped from
    Params::Validate.
  - Add %license.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-7
changelog:
  - set the postgresql-ctl context in main package
  - rebase the postgresql-setup to v3.2 to fix --initdb for multiple
    postmasters scenario


author: Jozef Mlich <jmlich@redhat.com> - 9.4.4-1
changelog:
  - rebase to 9.4.4 due to security issues
    CVE-2015-3165 CVE-2015-3167 CVE-2015-3166
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.6-1
changelog:
  - update to 9.4.6 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-6.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.9-1
changelog:
  - update to 9.4.9 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-9.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-8.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.12-1
changelog:
  - update to 9.4.12 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-12.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-11.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-10.html


author: Matej Muzila <mmuzila@redhat.com> - 5.6.24-1
changelog:
  - Update to MySQL 5.6.24 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  - Resolves: #1214590
  - Also fixes: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
      CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573


author: Honza Horak <hhorak@redhat.com> - 5.6.24-2
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207514


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.25-1
changelog:
  - Update to MySQL 5.6.25 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html
  - Resolves: #1247025


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.32-1
changelog:
  - Update to MySQL 5.6.32, which contains various security fixes
    (http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html)
  - Resolves: #1359623


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.33-1
changelog:
  - Update to MySQL 5.6.33, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html)
    Resolves: #1384962


author: Honza Horak <hhorak@redhat.com> - 5.6.34-1
changelog:
  - Update to MySQL 5.6.34, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html)
    Related: #1384962


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-9
changelog:
  - Include upstream patch: Meaningful name for builtins in JitCodeEvent API
  - https://github.com/joyent/node/commit/5a60e0d904c38c2bdb04785203b1b784967c870d


author: Pavel Kajaba <pkajaba@redhat.com> - 9.5.2-1
changelog:
  - Rebase to 9.5.2 (CVE-2016-3065) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.2-2
changelog:
  - fix upgrade path from rh-postgresql94 (rhbz#1334351)
  - fix path to binary directory in Makefile.regress (rhbz#1334706)


author: Petr Kubat <pkubat@redhat.com> - 9.5.4-1
changelog:
  - Rebase to 9.5.4 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-4.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-3.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.7-1
changelog:
  - Rebase to 9.5.7 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-7.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-6.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-5.html


author: Honza Horak <hhorak@redhat.com> - 5.5.37-5
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089209


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to MySQL 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555
    Resolves: #1160515


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-1
changelog:
  - Rebase to MySQL 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186114


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fixes: CVE-2015-2582 CVE-2015-2620 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 CVE-2015-2648 CVE-2015-2643
    Resolves: #1247023


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-29.fc21
changelog:
  - Backport vDSO regression.
  - Revert the makeinfo workaround from 7.8-27.fc21.
  - Further 1.75x improvement of the interactive symbols lookup (Doug Evans).


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.4.1-14.3
changelog:
  - Always use artifact alias org.eclipse.tycho:org.eclipse.jdt.core.
  - We use version of Jasper that requires javax.el* (2.x).


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Alexander Kurtakov <akurtako@redhat.com> 2.0.17-6
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about
    subtracting one from an index value.


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-8.1
changelog:
  - Rebase to 3.9.0-8.
  - Don't cleanup fake 32-bit libgcc created in %build. make regtest
    might depend on it to build -m32 binaries.
  - Use nonexp-regtest in check so gdbserver_tests are not run.
    They might hang the build.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 2.24-14
changelog:
  - Rebase to official binutils 2.24 release and recent patches.
    - Fix detection of little endian PPC64 binaries.  (#1095885)
    - Fix detection of uncompressed .debug_str sections.  (#1082370)
    - Fix compiling using gcc 4.9  (#1087374)
    - Use 2.24 in Source string.  Delete unused patches.
    - Fix decoding of abbrevs using a DW_FORM_ref_addr attribute.  (#1056797)
    - Import fixes on 2.24 branch that affect AArch64 IFUNC and PLT handling.
    - Fix building opcodes library with -Werror=format-security.  (#1037026)
    - Delete: binutils-2.23.52.0.1-64-bit-thin-archives.patch
    - Delete: binutils-rh980601.patch
    - Remove: binutils-2.23.52.0.1-revert-pr15149.patch from spec file.


author: Petr Machata <pmachata@redhat.com> - 0.155-2
changelog:
  - The bzip2-devel, zlib-devel and xz-devel dependencies should be
    unconditional.  These are all shipped in all currently supported
    OS's.


author: Petr Machata <pmachata@redhat.com> - 0.155-3
changelog:
  - Make sure the highest address for the CU is marked as end_sequence.
    (elfutils-0.155-dwarf_line.patch)


author: Mark Wielaard <mjw@redhat.com> - 0.155-7
changelog:
  - Don't blow up stack in dwarf_getsrclines with lots of lines.
    (elfutils-0.155-dwarf_getsrclines.patch)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Jakub Jelinek <jakub@redhat.com> 4.9.0-6
changelog:
  - update from 4.9 branch
  - backport -fsanitize=float-cast-overflow from the trunk
  - make sure libcilkrts can use system libgcc_s.so.1 (#1101242)
  - fix compat testing


author: Jakub Jelinek <jakub@redhat.com> 4.9.1-5
changelog:
  - update from 4.9 branch
  - fix libgfortran overflows on allocation (#1125219, CVE-2014-5044)
  - backport -fsanitize=alignment support from the trunk


author: Jakub Jelinek <jakub@redhat.com> 4.9.2-5
changelog:
  - update from 4.9 branch (#1149294, #1025729)
  - don't include libatomic and libitm packages on RHEL 7 (#1160176)
  - avoid file dependency in devtoolset-*-libstdc++-devel package (#1167957)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Marek Skalicky <mskalick@redhat.com> - 3.2.1-1
changelog:
  - Configuration files updated
    (mongod and mongos also listen on ipv6 localhost by default)
  - test subpackage contains resmoke.py tool instead of smoke.py
  - Upgrade to latest minor upgrade 3.2.1


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Tomas Hrcka <thrcka@redhat.com> - 4.3.0-5
changelog:
  - New upstream release 4.3.0
  - https://nodejs.org/en/blog/release/v4.3.0/
  - Build with bundled openssl, this will be reverted ASAP
  - Unbundled http-parser


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-4
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-2
changelog:
  - Rebuild from zvetlik/rh-nodejs6
  - newer releases have problems with debug
  - add procps-ng for tests
  - remove unused patches


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-8
changelog:
  - Legacy scripts are using scl enable
    Resolves: #1060767
  - Release bump to -8 in order to get builds from brew


author: Jozef Mlich <jmlich@redhat.com> 9.2.7-2
changelog:
  - update to 9.2.7 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
    Resolves: #1065861
    including fixes for CVE-2014-0066 CVE-2014-0064 CVE-2014-0065
    CVE-2014-0062 CVE-2014-0063 CVE-2014-0060 CVE-2014-0061


author: Jozef Mlich <jmlich@redhat.com> 9.2.8-1
changelog:
  - update to 9.2.8 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    Resolves: #1079994


author: Jozef Mlich <jmlich@redhat.com> - 9.2.10-1
changelog:
  - Rebase to 9.2.10 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1198663


author: Jozef Mlich <jmlich@redhat.com> - 9.2.13-1
changelog:
  - Rebase to 9.2.13 minor vesion per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html
    CVE-2015-3165 CVE-2015-3166 CVE-2015-3167
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.4-3
changelog:
  - Change owner of thermostat-command-channel script to
    thermostat:thermostat. Resolves RHBZ#1379702


author: Jie Kang <jkang@redhat.com> - 1.6.4-9
changelog:
  - Use java-devel-openjdk requires instead of a hard
    require on java-1.7.0-openjdk. Resolves rhbz#1398232


author: Jon VanAlten <jvanaltj@redhat.com> - 1.2.0-70.7
changelog:
  - Remove redundant symlinks to lucene jars
  - Resolves: RHBZ#1193828
  - Replace mongodb's deprecated userAdd with userCreate in thermostat-setup
  - Resolves: RHBZ#1193837


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.2.0-70.11
changelog:
  - Make deployment mechanism for the web endpoint using system
    tomcat work on RHEL-7.0 and RHEL-7.1. For RHEL-7.0 tomcat needs
    to get started via "service thermostat1-thermostat-tomcat start".
    On RHEL-7.1 it's "service tomcat@thermostat start".
  - Resolves: RHBZ#1215804


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


