# changelog

author: Patsy Franklin <pfrankli@redhat.com> - 2.24-14
changelog:
  - Rebase to official binutils 2.24 release and recent patches.
    - Fix detection of little endian PPC64 binaries.  (#1095885)
    - Fix detection of uncompressed .debug_str sections.  (#1082370)
    - Fix compiling using gcc 4.9  (#1087374)
    - Use 2.24 in Source string.  Delete unused patches.
    - Fix decoding of abbrevs using a DW_FORM_ref_addr attribute.  (#1056797)
    - Import fixes on 2.24 branch that affect AArch64 IFUNC and PLT handling.
    - Fix building opcodes library with -Werror=format-security.  (#1037026)
    - Delete: binutils-2.23.52.0.1-64-bit-thin-archives.patch
    - Delete: binutils-rh980601.patch
    - Remove: binutils-2.23.52.0.1-revert-pr15149.patch from spec file.


author: Mat Booth <mat.booth@redhat.com> - 3.1-1
changelog:
  - Resolves: rhbz#1178915 - Initial build for DTS 3.1
  - Add build-time deps on java-common and mvn30 SCLs
  - Update xmvn and ivy config for latest javapackages/xmvn
  - Fix file listed twice warning for xmvn/config.xml


author: Mat Booth <mat.booth@redhat.com> - 3.1-2
changelog:
  - Resolves: rhbz#1178915
  - Add missing xmvn resolver setting for metadata repo.
  - Make package archful to make sure lib64 dirs are owned.
  - Only require java-common and maven30 SCLs when on x86_64.


author: Mat Booth <mat.booth@redhat.com> - 3.1-3
changelog:
  - Resolves: rhbz#1178915 - Rebuild to get correct disttag
  - Add BR to Fix unexpanded java dir macros in java.conf
  - Don't enable maven30 SCL, as recommended by maven30 maintainer


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.4.1-14.3
changelog:
  - Always use artifact alias org.eclipse.tycho:org.eclipse.jdt.core.
  - We use version of Jasper that requires javax.el* (2.x).


author: Petr Machata <pmachata@redhat.com> - 0.155-2
changelog:
  - The bzip2-devel, zlib-devel and xz-devel dependencies should be
    unconditional.  These are all shipped in all currently supported
    OS's.


author: Petr Machata <pmachata@redhat.com> - 0.155-3
changelog:
  - Make sure the highest address for the CU is marked as end_sequence.
    (elfutils-0.155-dwarf_line.patch)


author: Mark Wielaard <mjw@redhat.com> - 0.155-7
changelog:
  - Don't blow up stack in dwarf_getsrclines with lots of lines.
    (elfutils-0.155-dwarf_getsrclines.patch)


author: Jakub Jelinek <jakub@redhat.com> 4.9.0-6
changelog:
  - update from 4.9 branch
  - backport -fsanitize=float-cast-overflow from the trunk
  - make sure libcilkrts can use system libgcc_s.so.1 (#1101242)
  - fix compat testing


author: Jakub Jelinek <jakub@redhat.com> 4.9.1-5
changelog:
  - update from 4.9 branch
  - fix libgfortran overflows on allocation (#1125219, CVE-2014-5044)
  - backport -fsanitize=alignment support from the trunk


author: Jakub Jelinek <jakub@redhat.com> 4.9.2-5
changelog:
  - update from 4.9 branch (#1149294, #1025729)
  - don't include libatomic and libitm packages on RHEL 7 (#1160176)
  - avoid file dependency in devtoolset-*-libstdc++-devel package (#1167957)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Eliminated rpmbuild "bogus date" error due to inconsistent weekday,
    by assuming the date is correct and changing the weekday.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.7.91.20140721-12.fc21
changelog:
  - Rebase to FSF GDB 7.7.91.20140721 (pre-7.8 snapshot).
  - Rebase the Intel VLA patchset.
  - New fix of the optimized-out entry data values crash (BZ 1111910).
  - [testsuite] Fix paginate-*.exp race for "read1".


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-14.fc21
changelog:
  - Rebase to FSF GDB 7.7.91.20140724 (pre-7.8 snapshot).
  - Import TUI regression fix (Pedro Alves, BZ 1123003).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-20.fc21
changelog:
  - Fix babeltrace errors (Yao Qi).
  - Fix crash on Python frame filters with unreadable arg (BZ 1126177).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-29.fc21
changelog:
  - Backport vDSO regression.
  - Revert the makeinfo workaround from 7.8-27.fc21.
  - Further 1.75x improvement of the interactive symbols lookup (Doug Evans).


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Alexander Kurtakov <akurtako@redhat.com> 2.0.17-6
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about
    subtracting one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-4
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)
  - Fix a couple nits in ltrace.1 (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-3
changelog:
  - Include fix for RHBZ1095137: semantic error ... syscall.sendfile
  - Include fix for upstream http://sourceware.org/PR16894


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-9
changelog:
  - dts3.1 merge from rhel-7.1
  - remove bodies of with_java, with_virtguest, with_virthost conditionals


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-8.1
changelog:
  - Rebase to 3.9.0-8.
  - Don't cleanup fake 32-bit libgcc created in %build. make regtest
    might depend on it to build -m32 binaries.
  - Use nonexp-regtest in check so gdbserver_tests are not run.
    They might hang the build.


author: Jeff Law <law@redhat.com> 2.25-7
changelog:
  - Resync with Fedora (binutils-2.25)
    Reapply DTS specific patches
    Backport testsuite patch to fix gold testsuite failure


author: Nick Clifton <nickc@redhat.com> 2.25-9
changelog:
  - Import patch from FSF to preserve the sh_link and sh_info fields in stripped ELF sections.
    (#1246390)


author: Patsy Franklin <pfrankli@redhat.com> 2.25.1-10
changelog:
  - Fix a case where the string was being used after the memory
    containing the string had been freed.


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-4
changelog:
  - Backport patch for ebz#488226 for incorrect content assist colors,
    fixes rhbz#1253651 and rhbz#1196736
  - Fix broken link to mockito in tests


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.2
changelog:
  - Fix failure to run tests and backport patch for ebz#489953 in order to fix
    some unit tests, fixes rhbz#1316061 and rhbz#1262804


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.4
changelog:
  - Update eclipse-build snapshot for test-support enhancements,
    fixes rhbz#1315730 and rhbz#1263101


author: Mat Booth <mat.booth@redhat.com> - 9.0.0-1.3
changelog:
  - Disable optimisation that generates no-strict-overflow warning instead of
    simply disabling the warning


author: Mat Booth <mat.booth@redhat.com> - 1:4.0.0-1
changelog:
  - Update to latest upstream release
  - No longer necessary to symlink optparse
  - Now archful package due to having a native component


author: Mat Booth <mat.booth@redhat.com> - 1:4.1.0-2.4
changelog:
  - Add all necessary symlinks for jython
  - Don't bother users with upstream project fund-raising screen
  - rhbz#1251408


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Update to elfutils 0.166 (#1322412)
    Drop upstreamed patches:
    - elfutils-0.165-elf-libelf.patch
    - elfutils-0.165-nobitsalign-strip.patch


author: Marek Polacek <polacek@redhat.com> 5.2.1-1.1
changelog:
  - for DTS lib{l,t}san-devel require lib{l,t}san >= 5.1.1 (#1247146)
  - rename libgccjit to devtoolset-4-libgccjit; install libgccjit.so.* into
    /opt/rh/devtoolset-4/root/lib64/


author: Jakub Jelinek <jakub@redhat.com> 5.2.1-1.2
changelog:
  - split documentation out of devtoolset-4-libgccjit-devel package into
    devtoolset-4-libgccjit-docs (#1245102)
  - add 32-bit linker script and 32-bit gcc driver wrapper so that
    32-bit devtoolset-4-libgccjit{,-devel} can be used for linking
    and at runtime on x86_64 (#1245102)


author: Jakub Jelinek <jakub@redhat.com> 5.3.1-6
changelog:
  - update from Fedora 5.3.1-5 (#1305952)
  - include non-stripped copies of *.a libraries in the debuginfo subpackage


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-13.fc23
changelog:
  - Rebase to FSF GDB 7.9.90.20150822 (7.10 branch snapshot).
  - Remove --with testsuite BuildRequires: prelink (prelink is orphaned in F-23+).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-18.el7
changelog:
  - [rhel7] Provide libstdc++-v3-python with C++11 even on RHEL-7 (RH BZ 1239290).
  - Do not provide libstdc++-v3-python lib64 files on 32-bit archs.
  - [rhel6,rhel7] Delete pahole.py on Python2 systems.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.11-60.fc24
changelog:
  - New Fedora GDB testfile: rhbz1261564-aarch64-watchpoint.exp
  - Backport gdb-7.11 stable branch PR gdb/19676 fix (Pedro Alves).


author: Mat Booth <mat.booth@redhat.com> - 1.2.9-8
changelog:
  - Fix unstripped binaries and empty debuginfo package
  - Ensure presence of ant-junit at buildtime
  - Fixed mixed use of space and tabs


author: Mat Booth <mat.booth@redhat.com> - 2.0.17-17.2
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about subtracting
    one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-10
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-13
changelog:
  - 3.10.1 Refresh.
    - Add valgrind-3.10.1-di_notify_mmap.patch
    - Add valgrind-3.10.1-memmove-ld_so-ppc64.patch
    - Add valgrind-3.10.1-kernel-4.0.patch.
    - Add valgrind-3.10.1-cfi-redzone.patch.
    - Add valgrind-3.10.1-memfd_create.patch.
    - Add valgrind-3.10.1-syncfs.patch.
    - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
    - Add valgrind-3.10.1-fno-ipa-icf.patch.
    - Add valgrind-3.10.1-demangle-q.patch
    - Add valgrind-3.10-1-ppc64-sigpending.patch
    - Filter out -fstack-protector-strong and disable _hardened_build.
    - Add valgrind-3.10.1-send-recv-mmsg.patch
    - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-glibc-version-check.patch
    - Add accept4 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-ppc64-accept4.patch.
    - Add valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10-s390-spechelper.patch.
    - Add valgrind-3.10.1-mempcpy.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - allow enabling additional SCLs using service-environment file
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-6.1
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This RPM shouldn't say it is upstream's product
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd24-httpd.ini
  -->  Config file for automated patch script
  - Added Source: httpd-spec_sl_index.html.sl7.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-16
changelog:
  - don't run posttrans restart if httpd-disable-posttrans exists (#1047097)
  - mod_proxy: fix crash in brigade cleanup under high load (#1040448)
  - remove "webserver" from provides (#1042877)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - add legacy action scripts and htcacheclean service file,
    use syslog for suexec logging (#1061009)
  - mod_dav: fix locktoken handling (#1061010)
  - mod_ssl: sanity-check use of "SSLCompression" (#1061011)
  - mod_ssl: allow SSLEngine to override Listen-based default (#1061016)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077885)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077885)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_proxy: add security fix for CVE-2014-0117
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226
  - mod_cache: add secutiry fix for CVE-2013-4352


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  - mod_proxy_fcgi: fix heap-based buffer overflow (CVE-2014-3583)


author: Honza Horak <hhorak@redhat.com> 5.5.33a-3
changelog:
  - Use scl enable -- feature
  - Check if correct process is running in mysql-wait-ready script
    Related: #1025323
  - Use correct log file name in post script
    Resolves: #1025280


author: Honza Horak <hhorak@redhat.com> 5.5.34-6
changelog:
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Related: #1037748


author: Honza Horak <hhorak@redhat.com> 5.5.35-6
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1056457
  - Use log file corresponding with RHEL-7 base
    Resolves: #1007861
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054649
  - Fix advice after initialization of data stack
    Resolves: #1056135
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042873


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/
  - Wait for daemon ends
    Resolves: #1072958


author: Honza Horak <hhorak@redhat.com> - 5.5.37-9
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> - 5.5.40-10
changelog:
  - Rebase to 5.5.40
    https://kb.askmonty.org/en/mariadb-5540-changelog/
    Also fixes: CVE-2014-4274 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6505 CVE-2014-4287 CVE-2014-6551 CVE-2014-6555 CVE-2014-6484
    CVE-2014-6464 CVE-2014-6559 CVE-2014-6530 CVE-2014-6564 CVE-2014-6469
    CVE-2014-6463
    Resolves: #1160550


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-11
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186115


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-11
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186116


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fix: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
    CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582
    CVE-2015-2620 CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 
    Resolves: #1247027


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.49-1
changelog:
  - Rebase to 5.5.49
    https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/
    Resolves: #1342454


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-3
changelog:
  - Related: #1055555 (add -scldevel subpackage for shipped build-requires garbage)
  - fix installed dirs permissions


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-5
changelog:
  - Resolves: #1075736 (initscript doesnt respect LSB)
  - Resolves: #1057097 (Use the same name for daemon and log file)
  - Resolves: #1075688 (metapackage shouldnt depend on another metapackage)
  - Resolves: #1075025 (Leftovers files after mongodb packages removal)


author: Honza Horak <hhorak@redhat.com> 5.5.34-3
changelog:
  - Check if correct process is running in mysql-wait-ready script
    Related: #1026313
  - Use scl enable -- feature


author: Honza Horak <hhorak@redhat.com> 5.5.35-1
changelog:
  - Update to MySQL 5.5.35, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-35.html
    Resolves: #1045081


author: Honza Horak <hhorak@redhat.com> 5.5.35-4
changelog:
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Related: #1045401


author: Honza Horak <hhorak@redhat.com> 5.5.36-4
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1056440
  - Do not blindly remove socket during start
    Resolves: #1045401
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054261
  - Fix advice after initialization of data stack
    Resolves: #1054458
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-5
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089209


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to MySQL 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555
    Resolves: #1160515


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-1
changelog:
  - Rebase to MySQL 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186113


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-1
changelog:
  - Rebase to MySQL 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186114


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fixes: CVE-2015-2582 CVE-2015-2620 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 CVE-2015-2648 CVE-2015-2643
    Resolves: #1247023


author: Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-7
changelog:
  - correct 404 and 50x error pages (#1065981)
  - use initscripts legacy actions for nginx-upgrade (#1065981)
  - expand nginx man page variables (#1066056)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.21-1
changelog:
  - new upstream release 0.10.21
    http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
  - resolves an undisclosed security vulnerability in the http module


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.7-10
changelog:
  - do not install .orig file generated by make xs_generate
  - filter unversioned mod_perl.so from provides


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.8-3.20130221svn1448242
changelog:
  - own include directories in -devel subpackage (#1079938)
  - depend on httpd-2.4 in -devel subpackage


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Remi Collet <rcollet@redhat.com> 5.4.16-1
changelog:
  - rebase to 5.4.16
  - fix hang in FindTishriMolad(), #965144
  - patch for upstream Bug #64915 error_log ignored when daemonize=0
  - patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
  - patch for upstream bug #64960 Segfault in gc_zval_possible_root


author: Remi Collet <rcollet@redhat.com> 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add missing man pages (phar, php-cgi)
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix #985350


author: Remi Collet <rcollet@redhat.com> 5.4.16-8
changelog:
  - relocate RPM macro #1008483
  - remove ZTS conditional stuf for ligibility
  - add mod_php for httpd24 collection


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.16-20
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.40-2
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <rcollet@redhat.com> - 3.1.15-0.4.20140912
changelog:
  - upstream has switched from SVN to GIT
  - disable shm_strings_buffer in provided configuration
  - fix segfault when Zend Opcache is ebabled #1052178


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Remi Collet <rcollet@redhat.com> - 5.5.6-8
changelog:
  - fix patch name
  - fix memory leak introduce in patch for CVE-2014-1943
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712


author: Remi Collet <rcollet@redhat.com> - 5.5.6-9
changelog:
  - gd: fix NULL deref in imagecrop CVE-2013-7327
  - gd: drop vpx support, fix huge memory consumption #1075201


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.5.20-1
changelog:
  - rebase to PHP 5.5.20 #1057089
  - fix package name in description
  - php-fpm own session and wsdlcache dir
  - php-common doesn't provide php-gmp


author: Remi Collet <rcollet@redhat.com> - 5.5.21-2
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868


author: Remi Collet <rcollet@redhat.com> - 5.5.21-3
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 1.3.0-1
changelog:
  - release 1.3.0 (beta)
  - use system json-c when available (fedora >= 20)
  - use jsonc name for module and configuration


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-1
changelog:
  - rebase to 9.2.6
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html
    Resolves: #1038693
  - More details about replication issues are at
    https://wiki.postgresql.org/wiki/Nov2013ReplicationIssue


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-8
changelog:
  - Legacy scripts are using scl enable
    Resolves: #1060767
  - Release bump to -8 in order to get builds from brew


author: Jozef Mlich <jmlich@redhat.com> 9.2.7-2
changelog:
  - update to 9.2.7 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
    Resolves: #1065861
    including fixes for CVE-2014-0066 CVE-2014-0064 CVE-2014-0065
    CVE-2014-0062 CVE-2014-0063 CVE-2014-0060 CVE-2014-0061


author: Jozef Mlich <jmlich@redhat.com> 9.2.8-1
changelog:
  - update to 9.2.8 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    Resolves: #1079994


author: Jozef Mlich <jmlich@redhat.com> - 9.2.10-1
changelog:
  - Rebase to 9.2.10 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1198663


author: Jozef Mlich <jmlich@redhat.com> - 9.2.13-1
changelog:
  - Rebase to 9.2.13 minor vesion per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html
    CVE-2015-3165 CVE-2015-3166 CVE-2015-3167
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-3
changelog:
  - Properly generate bytecompilation files for Python itself
  Fixes:
  rhbz#967224
  rhbz#967288
  rhbz#968199


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-9
changelog:
  - Add patch to resolve missing libffi while building
  - Remove BuildRequires: db4-devel, add BuildRequires: libdb-devel


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-10
changelog:
  - Modified patch so tests can acknowledge the existense or lack
  of SSLv2 support
  Resolves: rhbz#1319703


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-12
changelog:
  - Modified 00224-pep476-add-toggle-for-cert-verify.patch to use certificate verification
  config file from python27 SCL directory.
  Resolves: rhbz#1111464


author: Tomas Orsava <torsava@redhat.com> - 2.7.8-15
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.8-1
changelog:
  - Update to 2.7.8.
  Resolves: rhbz#1167912
  - Make python-devel depend on scl-utils-build.
  Resolves: rhbz#1170993


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.8-2
changelog:
  - Fix %check setion not failing properly on failed test
  - Fixed CVE-2013-1752, CVE-2013-1753 
  Resolves: rhbz#1187779


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib64/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-4
changelog:
  - Own the pkgconfig dir and tapsetdir, these are not owned by any
  the respective packages in SCL (rhbz#966547).


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-8
changelog:
  - Fix memory leak in gdbm module (rhbz#977308)
  - Make building depending collections on top of python33 easier
  - Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-9
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-13
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-14
changelog:
  - Addendum for the Fix for CVE-2016-0772 (rhbz#1303647)
    In this version of Python, smtplib has 644 permissons, not 755,
    thus I modified the patch to expect this and not adjust the permissons.
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-15
changelog:
  - Addendum for the Fix for CVE-2016-5699 (rhbz#1303699)
    Python 3.3 does not yet have functions fullmatch and subTest,
    the patch was rewritten accordingly
  Resolves: rhbz#1346359


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Honza Horak <hhorak@redhat.com> - 1:10.0.16-6
changelog:
  - Do not use scl prefix more than once in paths
    Based on https://www.redhat.com/archives/sclorg/2015-February/msg00038.html
  - Check permissions when starting service on RHEL-6
    Resolves: #1194699
  - Do not create test database by default
    Related: #1194611


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-1
changelog:
  - Rebase to version 10.0.17
  - Added variable for turn off skipping some tests
  - Add SELinux rules for pid file
  - Add SELinux definition for /var/log/mariadb.*
    Related: #1194206


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-4
changelog:
  - Include client plugins into -common package since they are used by both -libs
    and base packages.
  - Do not use libedit
    Related: #1201988
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202011
  - Let plugin dir to be owned by -common


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-7
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991
  - Add openssl as BuildRequires to run some openssl tests during build
    Related: #1189180


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-9
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207170


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.25-1
changelog:
  - Rebase to version 10.0.25
    Resolves: #1330444
    Also fixes: CVE-2016-2047 CVE-2016-0668 CVE-2016-0666 CVE-2016-0655
    CVE-2016-0651 CVE-2016-0650 CVE-2016-0649 CVE-2016-0648 CVE-2016-0647
    CVE-2016-0646 CVE-2016-0644 CVE-2016-0643 CVE-2016-0642 CVE-2016-0641
    CVE-2016-0640 CVE-2016-0616 CVE-2016-0610 CVE-2016-0609 CVE-2016-0608
    CVE-2016-0606 CVE-2016-0600 CVE-2016-0598 CVE-2016-0597 CVE-2016-0596
    CVE-2016-0546 CVE-2016-0505 CVE-2015-7744 CVE-2015-4913 CVE-2015-4895
    CVE-2015-4879 CVE-2015-4870 CVE-2015-4861 CVE-2015-4858 CVE-2015-4836
    CVE-2015-4830 CVE-2015-4826 CVE-2015-4819 CVE-2015-4816 CVE-2015-4815
    CVE-2015-4807 CVE-2015-4802 CVE-2015-4792


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.25-1
changelog:
  - Rebase to version 10.0.25
    Resolves: #1330445
    Also fixes: CVE-2016-2047 CVE-2016-0668 CVE-2016-0666 CVE-2016-0655
    CVE-2016-0651 CVE-2016-0650 CVE-2016-0649 CVE-2016-0648 CVE-2016-0647
    CVE-2016-0646 CVE-2016-0644 CVE-2016-0643 CVE-2016-0642 CVE-2016-0641
    CVE-2016-0640 CVE-2016-0616 CVE-2016-0610 CVE-2016-0609 CVE-2016-0608
    CVE-2016-0606 CVE-2016-0600 CVE-2016-0598 CVE-2016-0597 CVE-2016-0596
    CVE-2016-0546 CVE-2016-0505 CVE-2015-7744 CVE-2015-4913 CVE-2015-4895
    CVE-2015-4879 CVE-2015-4870 CVE-2015-4861 CVE-2015-4858 CVE-2015-4836
    CVE-2015-4830 CVE-2015-4826 CVE-2015-4819 CVE-2015-4816 CVE-2015-4815
    CVE-2015-4807 CVE-2015-4802 CVE-2015-4792


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.26-1
changelog:
  - Rebase to version 10.0.26
    Resolves: #1359868
    Also fixes: CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.14-1
changelog:
  - Fixed selinux policy
  - Update to 10.1.14 (includes various bug fixes)
  - Add -h and --help options to galera_new_cluster
    Resolves: #1333007


author: Honza Horak <hhorak@redhat.com> - 2.6.7-9
changelog:
  - Remove NFS register feature for questionable usage for DBs
  - Allow to skip tests during build
  - Simplify few SCL macros


author: Marek Skalicky <mskalick@redhat.com> 2.6.9-1
changelog:
  - Correct SELinux type for slc-helper script 
    Resolves: #1202013
  - Fix mongodb user HOME (Resolves: #1206157)
  - Upgrade to latest minor release 2.6.9 (Resolves: #1207118)


author: Honza Horak <hhorak@redhat.com> - 5.6.23-3
changelog:
  - Expand paths in perl scripts in mysql-test
  - Use correct path in install_db script warning
  - Use --no-defaults when checking server status before starting


author: Honza Horak <hhorak@redhat.com> - 5.6.23-4
changelog:
  - Do not use scl prefix more than once in paths
    Based on https://www.redhat.com/archives/sclorg/2015-February/msg00038.html
  - Check permissions when starting service on RHEL-6
    Resolves: #1194699
  - Add SELinux rules for pid file


author: Honza Horak <hhorak@redhat.com> - 5.6.23-7
changelog:
  - Do not use system libedit
    Related: #1202016
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202016


author: Honza Horak <hhorak@redhat.com> - 5.6.23-9
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991


author: Matej Muzila <mmuzila@redhat.com> - 5.6.24-1
changelog:
  - Update to MySQL 5.6.24 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  - Resolves: #1214590
  - Also fixes: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
      CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573


author: Honza Horak <hhorak@redhat.com> - 5.6.24-2
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207514


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.25-1
changelog:
  - Update to MySQL 5.6.25 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html
  - Resolves: #1247025


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.32-1
changelog:
  - Update to MySQL 5.6.32, which contains various security fixes
    (http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html)
  - Resolves: #1359623


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Tomas Hrcka <thrcka@redhat.com> - 4.3.0-5
changelog:
  - New upstream release 4.3.0
  - https://nodejs.org/en/blog/release/v4.3.0/
  - Build with bundled openssl, this will be reverted ASAP
  - Unbundled http-parser


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Paul Howarth <paul@city-fan.org> - 0.402-1
changelog:
  - Update to 0.402 (significant and slightly incompatible update - see Changes)
  - This release by REHSACK → update source URL
  - Classify buildreqs by usage
  - Modernize spec as this isn't going to anywhere older than F-22


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Skip pairmap()'s MULTICALL implementation 5.8.9/5.10.0 as it doesn't work
      (CPAN RT#87857)
    - Comment on the fact that package "0" is defined but false (CPAN RT#88201)
    - TODO test in t/readonly.t now passes since 5.19.3 (CPAN RT#88223)
    - Added any, all, none, notall list reduction functions (inspired by
      List::MoreUtils)
    - Added List::Util::product()
    - Added Scalar::Util::unweaken()
    - Avoid C99/C++-style comments in XS code
    - Fix dualvar tests for perl 5.6; fix skip() test counts in dualvar.t
    - Neater documentation examples of other functions that can be built using
      reduce
    - Implement reduce() and first() even in the absence of MULTICALL
    - Various documentation changes/updates
    - Correct uses of overload operators in unit tests (CPAN RT#91969)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Do not change the string arg in XS, use copy instead (CPAN RT#96893)
    - Add README make target
    - Add more distribution metadata
  - This release by ETHER → update source URL
  - Update debugger patch (CPAN RT#96893)
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Copy the contents of the %DB::sub entry if it exists; fixes
      Devel::NYTProf's anon sub handling (CPAN RT#50524)
  - Drop upstreamed debugger patch
  - Drop EL-5 compatibility since we need Devel::CheckBin, which can't be
    built for EPEL-5 or EPEL-6


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Move variable declaration to fix warning under
      -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3)
    - Converted distribution packaging to Dist::Zilla
    - Fix licence in LICENSE and pod
  - Package new upstream CONTRIBUTING and LICENSE files
  - Classify buildreqs by usage


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Remi Collet <remi@fedoraproject.org> 5.6.4-2
changelog:
  - Update to 5.6.4
    http://www.php.net/releases/5_6_4.php
  - add sybase_ct extension (in mssql sub-package)
  - xmlrpc requires xml


author: Remi Collet <rcollet@redhat.com> 5.6.5-1
changelog:
  - Update to 5.6.5
    http://www.php.net/releases/5_6_5.php
  - FPM: enable ACL for Unix Domain Socket
  - Embdded: filter requires for libphp5-5.6.so
  - add register.content


author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Honza Horak <hhorak@redhat.com> - 9.4.1-1
changelog:
  - Update to 9.4.1
    This also fixes CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1192910


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-7
changelog:
  - set the postgresql-ctl context in main package
  - rebase the postgresql-setup to v3.2 to fix --initdb for multiple
    postmasters scenario


author: Jozef Mlich <jmlich@redhat.com> - 9.4.4-1
changelog:
  - rebase to 9.4.4 due to security issues
    CVE-2015-3165 CVE-2015-3167 CVE-2015-3166
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.6-1
changelog:
  - update to 9.4.6 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-6.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.9-1
changelog:
  - update to 9.4.9 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-9.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-8.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.1-1
changelog:
  - Rebase to 9.5.1 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-1.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.5.2-1
changelog:
  - Rebase to 9.5.2 (CVE-2016-3065) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.2-2
changelog:
  - fix upgrade path from rh-postgresql94 (rhbz#1334351)
  - fix path to binary directory in Makefile.regress (rhbz#1334706)


author: Petr Kubat <pkubat@redhat.com> - 9.5.4-1
changelog:
  - Rebase to 9.5.4 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-4.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-3.html


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python34/root/usr/lib64/python3.4/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Updated to 3.4.2
  - Added scl-utils-build to Requires (rhbz#1144601)
  - Add pynche executable (rhbz#1094640)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-5
changelog:
  - Rename the patch for test imports to be the same as in RHEL 6 branch.
  - Fix failure in fips mode if index name is too long.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058613
  - Add LICENSE, README and man page.
    Resolves: rhbz#1063707


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-2
changelog:
  - Fixed operating_system to properly install binary extensions.
  - Rebase patches to apply cleanly.
  - Fix PPC64LE support.
  - Fix -tcltk requires.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251465


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com>
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.448-41
changelog:
  - Use system libyaml for el7.
  - Fix build against OpenSSL with enabled ECC curves.
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    - Resolves: rhbz#1026993
  - Fix test suite issue when compiling against glibc >= 2.17.
  - Workaround pkgconfig provides issue.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.247-14
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.
  - Better support for build without configuration (rhbz#977941).
  - Fix RubyGems version.
  - Fix RubyGems search paths when building gems with native extension
    (rhbz#979133).
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.247-15
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1034638
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby200
    - Resolves: rhbz#1034639
  - Enable OpenSSL MD5 hashes for tests


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.0.0-4
changelog:
  - Fix FTBFS since osgi()-style provides have been removed from
    SCL-ized deps.
  - Resolves: RHBZ#1045550


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.0.0-9
changelog:
  - Fix path to java and tools.jar in boot scripts.
  - Add sanity check for correct paths in boot scripts
    in check section.
  - Resolves: RHBZ#1053123 RHBZ#1052992


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release.
  - Also fixes RHBZ#1045016 (Keyring issue).
  - Require exact version of thermostat core in webapp subpackage.
  - Resolves: RHBZ#1064987


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.0.4-70.1
changelog:
  - Update to latest upstream bugfix release (v1.0.4).
  - Depend on mvn()-style auto-requires over manual requires.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.0.4-70.3
changelog:
  - Fix dangling symlinks for jline2, google-gson and apache-commons-fileupload
    dependencies.
  - Resolves: RHBZ#1119757


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.2.0-70.5
changelog:
  - Install setup complete stamp file for
    thermostat1-thermostat-storage.service
  - Resolves: RHBZ#1202300.


author: Jon VanAlten <jvanaltj@redhat.com> - 1.2.0-70.7
changelog:
  - Remove redundant symlinks to lucene jars
  - Resolves: RHBZ#1193828
  - Replace mongodb's deprecated userAdd with userCreate in thermostat-setup
  - Resolves: RHBZ#1193837


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.2.0-70.11
changelog:
  - Make deployment mechanism for the web endpoint using system
    tomcat work on RHEL-7.0 and RHEL-7.1. For RHEL-7.0 tomcat needs
    to get started via "service thermostat1-thermostat-tomcat start".
    On RHEL-7.1 it's "service tomcat@thermostat start".
  - Resolves: RHBZ#1215804


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.10-2
changelog:
  - backport fix for remote DoS or unspecified other impact via type confusion
    (RHBZ#991116; CVE-2013-2882)


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-9
changelog:
  - Include upstream patch: Meaningful name for builtins in JitCodeEvent API
  - https://github.com/joyent/node/commit/5a60e0d904c38c2bdb04785203b1b784967c870d


