# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Than Ngo <than@redhat.com> - 143.0.9^chromium143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
  - Hoshino Lina: Update to cef-143.0.9+ge88e818 (rhbz#2420939)
  - * High CVE-2025-13630: Type Confusion in V8
  - * High CVE-2025-13631: Inappropriate implementation in Google Updater
  - * High CVE-2025-13632: Inappropriate implementation in DevTools
  - * High CVE-2025-13633: Use after free in Digital Credentials
  - * Medium CVE-2025-13634: Inappropriate implementation in Downloads
  - * Medium CVE-2025-13720: Bad cast in Loader
  - * Medium CVE-2025-13721: Race in v8
  - * Low CVE-2025-13635: Inappropriate implementation in Downloads
  - * Low CVE-2025-13636: Inappropriate implementation in Split View
  - * Low CVE-2025-13637: Inappropriate implementation in Downloads
  - * Low CVE-2025-13638: Use after free in Media Stream
  - * Low CVE-2025-13639: Inappropriate implementation in WebRTC
  - * Low CVE-2025-13640: Inappropriate implementation in Passwords
  - Drop workaround darkmode-image-policy.patch
  - Fix build error due to Unresolved dependencies
  - Fix swiftshader to compile with llvm-16.0
  - Refresh python-3.9-ftbfs patch for el9
  - Refresh ppc64le patches
  - Refresh chromium.conf


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
  - * High: Under coordination
  - * Medium CVE-2025-14372: Use after free in Password Manager
  - * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them
    unreadable
  - Hoshino Lina: Update to cef-143.0.10+g8aed01b (rhbz#2421703)


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146 [rhbz#2423482]
  - * High CVE-2025-14765: Use after free in WebGPU
  - * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as
    it's merged


author: Than Ngo <than@redhat.com> - 143.0.13^chromium143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192 [rhbz#2427842]
  - * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for
    x86_64/aarch64
  - Enable build for epel10.1


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-1
changelog:
  - This fixes a long standing bug; see the heading 02-14 on
  - https://cppad.readthedocs.io/latest/whats_new_24.html


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-2
changelog:
  - This fixes a bug in fun2val.hpp. This change will not be necessary
  - once the upstream source advances to 20240000.4.


author: Brad Bell <bradbell at seanet dot com> - 20250000.0-3
changelog:
  - 1. Add the year macro and use it to define soversion and Version.
  - 2. Remove the cppad-doc subpackage because documantion for this stable 
       version is not available at https://cppad.readthedocs.io/stable-2025/ .
  - 3. Change include_doc=true, cmake_install_docdir=NOTFOUND, and add
       make doc_user to test building, but not installing, user documentation.
  - 4. The ppc64le arch has been fixed and now the CppAD to_string test pass
       for long double (so we do not need to skip that test).
  - 5. Use get_started.cpp to test the installed version of CppAD.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-1
changelog:
  - Update to release 1.32.9
  - Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064,
    rhbz#2399338
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2407593, rhbz#2407864, rhbz#2408140, rhbz#2408571
  - Resolves: rhbz#2408638, rhbz#2408701, rhbz#2409048, rhbz#2409331
  - Resolves: rhbz#2409610, rhbz#2409996, rhbz#2410283, rhbz#2410561
  - Resolves: rhbz#2410928, rhbz#2411196, rhbz#2411459, rhbz#2412524
  - Resolves: rhbz#2412676, rhbz#2412756


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.11-2
changelog:
  - Remove unneeded completions generation
  - Removes call to compiled crio binary to generate completions output.
  - Upstream release already contains generated content


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-1
changelog:
  - Update to release v1.33.5
  - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,
    rhbz#2399065, rhbz#2399339
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release 1.33.6
  - Resolves: rhbz#2407594, rhbz#2407865, rhbz#2408141, rhbz#2408575
  - Resolves: rhbz#2408639, rhbz#2408702, rhbz#2409049, rhbz#2409332
  - Resolves: rhbz#2409611, rhbz#2409997, rhbz#2410284, rhbz#2410562
  - Resolves: rhbz#2410929, rhbz#2411197, rhbz#2411460, rhbz#2412525
  - Resolves: rhbz#2412677, rhbz#2412757


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-1
changelog:
  - Update to release v1.34.1
  - Resolves: rhbz#2333357, rhbz#2398409, rhbz#2398664, rhbz#2399066,
    rhbz#2399340
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release 1.34.2
  - Resolves: rhbz#2407595, rhbz#2407866, rhbz#2408142, rhbz#2408577
  - Resolves: rhbz#2408640, rhbz#2408703, rhbz#2409050, rhbz#2409333
  - Resolves: rhbz#2409612, rhbz#2409998, rhbz#2410285, rhbz#2410563
  - Resolves: rhbz#2410930, rhbz#2411198, rhbz#2411461, rhbz#2412526
  - Resolves: rhbz#2412678, rhbz#2412758


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-2
changelog:
  - Remove potential race condition
  - Removes unneeded calls to compiled crio binary that appear to cause an
    occasional race condition on ppc64le koji builders


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.2-1
changelog:
  - Update to release v28.5.2
  - Resolves: rhbz#2412743
  - Incorporates runc v1.3.3
  - Upstream bug fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-1
changelog:
  - Update to release v29.0.0
  - Upstream note: "This release includes several breaking changes and
    deprecations. Review the release notes carefully before upgrading."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-2
changelog:
  - Amend tests in %check
  - Expand tests found in submodules using -F parameter to gocheck2
  - v29.0.0 changes  Co-authored-by: Maxwell G <maxwell@gtmx.me>


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.2-2
changelog:
  - Remove flaky tests from %check
  - TestSCTP6Proxy is flaky on x86_64 arch - usually working but sometimes
    not
  - TestSCTP6ProxyNoListener often fails on ppc64le (rawhide)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1
changelog:
  - Update to release v29.1.3
  - Resolves: rhbz#2417969
  - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
  - Upstream new features and fixes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Michal Schorm <mschorm@redhat.com> - 26.4.20-3
changelog:
  - Fix for FTBFS after Fedora Change "Unify bin and sbin"
    https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin


author: Jens Petersen <petersen@redhat.com> - 9.12.1.20250219-4
changelog:
  - 9.12.2 RC1
  - https://downloads.haskell.org/~ghc/9.12.1.20250219/docs/users_guide/9.12.2-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2-5
changelog:
  - 9.12.2
  - https://downloads.haskell.org/~ghc/9.12.2/docs/users_guide/9.12.2-notes.html
  - bump llvm to 18


author: Jens Petersen <petersen@redhat.com> - 9.12.2-6
changelog:
  - move ghc-internal into base subpackage
  - make ghc-filesystem arch for now for index.html
  - avoid pulling in nodejs via *.mjs scripts
  - own ghclibdir/share/{,ghcplatform}
  - add obsoletes for ghc-internal


author: Jens Petersen <petersen@redhat.com> - 9.12.2-7
changelog:
  - enable debug_info for release builds
  - use 'release' flavor instead of 'perf'
  - bump boot compiler to ghc9.8
  - use new NCG for riscv64 (thanks to supersven)
  - add conflicts for other ghcX.Y-compiler-default packages
  - also munge haddock paths in .conf files


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Florian Weimer <fweimer@redhat.com> - 2.41-7
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 6e489c17f827317bcf8544efefa65f13b5a079dc:
  - ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
  - ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc: Optimized strncmp for power10" (CVE-2025-5745)
  - elf: Keep using minimal malloc after early DTV resize (bug 32412)
  - nptl: Fix pthread_getattr_np when modules with execstack are allowed (BZ 32897)


author: Florian Weimer <fweimer@redhat.com> - 2.41-9
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit e7c419a2957590fb657900fc92a89708f41abd9d:
  - iconv: iconv -o should not create executable files (bug 33164)
  - CVE-2025-8058: Fix double-free after allocation failure in regcomp (#2383154)


author: Florian Weimer <fweimer@redhat.com> - 2.41-10
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 513629b14d43bffd83985ffb9cf10e5599e649d2:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - elf: Do not add a copy of _dl_find_object to libc.so
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Florian Weimer <fweimer@redhat.com> - 2.41-11
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit a52c9b75c70124fe4f69e6b0ed288e2c14bd7ce9:
  - Optimize __libc_tsd_* thread variable access
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Update ___tls_get_addr to preserve vector registers
  - elf: Preserve _rtld_global layout for the release branch
  - elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
  - elf: Fix handling of symbol versions which hash to zero (bug 29190)
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - elf: Compile _dl_debug_state separately (bug 33224)
  - elf: Restore support for _r_debug interpositions and copy relocations
  - elf: Introduce _dl_debug_change_state
  - elf: Introduce separate _r_debug_array variable
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
  - Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
  - Remove <libc-tsd.h>
  - AArch64: Improve codegen SVE log1p helper
  - AArch64: Optimise SVE FP64 Hyperbolics
  - AArch64: Optimize SVE exp functions
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Optimize algorithm in users of SVE expf helper
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-12
changelog:
  - Auto-sync with upstream branch master,
    commit 6a0b8e366520a09722aef6c17ec1b103e82f3c28:
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601) (Florian Weimer)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: update tests for SME (Yury Khrustalev)
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-13
changelog:
  - Auto-sync with upstream branch master,
    commit c96b4ed1e26f06ebc56c17ba2c29d1647be68c1e:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-17
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.1-0]
changelog:
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
  - add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
  - add liburing-devel as BR for selftests (Thorsten Leemhuis)
  - add a few optional BRs for perf (Thorsten Leemhuis)
  - Linux v6.18.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Packit <hello@packit.dev> - 2.0.0-1
changelog:
  - Update to version 2.0.0
  - License changed to Apache-2.0 by upstream in version 2.0.0
  - Upstream moved to https://github.com/OpenIDC/liboauth2
  - Resolves: rhbz#2307691


author: Stefan Berger <stefanb@linux.ibm.com> - 0.9.6-8
changelog:
  - Apply patch for fixing build without engine.h
  - Apply patch for returning proper error code upon RSA decryption failure


author: Michal Schorm <mschorm@redhat.com> - 8.0.41-2
changelog:
  - Switch from the RPM scriptlet to the sysusers.d configuration
    for 'mysql' user / group creation
  - We no longer enforce the fixed UID/GID 27 !!!


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Richard Russon <rich@flatcap.org> - 20250113-1
changelog:
  - Bug Fixes
    - #4477 fix crash in folder-hook
    - #4480 fix memory leak in compose message preview (fixes #4478)
    - #4483 query: fix comma-separated names
    - #4485 lua: fix `lua_mutt_call()`
    - #4490 notmuch: refresh the Email if the filename changes
    - fix: no new mail message
    - fix display of certificate fingerprints
    - fix prompt colour
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovakian
    - 100% Turkish
    - 91% French
    - 41% Chinese (Traditional)
  - Build
    - #4479 Fix DT_NUMBER entries on 32-bit endian platforms
  - Code
    - #4481 Simplify `mutt_file_fopen()`
    - colour refactoring
    - standardise variable names for temporary files


author: Richard Russon <rich@flatcap.org> - 20250404-1
changelog:
  - Features
    - #4493 config: don't quote enums
    - #4493 link config dump to docs
    - #4494 refactor the Help Page for clarity
    - #4554 CLI: `neomutt -DD` -- Dump Different
    - #4593 browser: tag select rather than descend
  - Bug Fixes
    - #3469 source: fix variable interpretation
    - #4370 `mutt_oauth2`: refactor `sasl_string` computation
    - #4536 expand tabs to spaces in compose preview
    - #4537 fix dumping of initial values
    - #4538 move `real_name` init
    - #4542 Remove `MUTT_NEWFOLDER`, fix appending to mbox
    - #4546 Respect Ignore when modifying an email's headers
    - #4549 fix refresh on toggle `hide_thread_subject`
    - #4550 buffer: fix seek
    - #4551 add comma to single `<complete-query>` match
    - #4595 notmuch: check for parse failure
    - #4596 query: allow `<>`s around email addresses
    - pager: fix normal/stripe colour
    - fix colour leaks in pager
    - fix array leak in the verify certificate dialog
  - Translations
    - 100% German
    - 100% Turkish
    - 96% Lithuanian
    - 86% French
    - 49% Chinese (Traditional)
  - Build
    - #4552 Deprecate some configure options that aren't used anymore
    - build: workaround for unused-result warning
  - Code
    - #4492 colour refactoring
    - #4543 debug: Chain old SEGV Handler
    - #4545 Allow nested `ARRAY_FOREACH()`
    - #4553 config: API `has_been_set()`
    - #4557 config: drop ConfigSet from API functions
    - #4558 drop obsolete pgp/smime menus
    - #4559 array: `foreach_reverse()`
    - #4560 Change description of verify-key to be crypto-scheme agnostic
    - #4561 expando: move EnvList out of library
    - #4570 Simplify the management of NeoMutt Commands
    - #4571 libcli - parse the command line
    - #4580 Split CLI Usage into sections
    - #4582 pager: fix lost `NT_PAGER` notifications
    - #4591 pager: fix refresh on config/colour changes
    - array: upgrade `get_elem_list()`
    - Buffer refactoring
    - coverity: fix defects
    - improve `localise_config()`
    - main: drop -B (batch mode) option
    - merge init.[ch] into main.c
    - refactor version code
    - neomutt: `home_dir`, `username`, `env`
    - query: unify NeoMutt `-D` and `-Q`
    - refactor `main.c`/`init.c`
    - sidebar: streamline expando callbacks
    - test: lots of parse coverage
    - window refactoring
    - window: force recalc|repaint on new windows
  - Upstream
    - Update mutt/queue.h
    - Fix NULL pointer dereference when calling `imap_logout_all()`


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.0-1
changelog:
  - Rebase to release 1.7.0 (#2321512)
  - Rebase to pam-redhat-1.2.0
  - build: update to meson build system
  - doc: disable build for i686


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 42 >= and RHEL >= 11


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.12-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Mark Wielaard <mjw@fedoraproject.org> - 3.25.1-3
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


