# changelog

author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.0p1-14
changelog:
  - Based on openssh-8.0p1-24.el8
  - Drop patch openssh-8.0p1-sshbuf-readonly.patch (now included in
    openssh-8.0p1-gssapi-keyex.patch)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-1
changelog:
  - ARC version 7 packaged for EPEL with a different package name
  - Based on the Fedora rawhide package
  - These packages declare conflicts with the ARC version 6 packages


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 1.4.0-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify Digest::MD5 versioned dependency generation using a patch
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.4.1-1
changelog:
  - Update to 1.41
    - Adopt new repo structure - see:
      http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
    - Reformat Makefile.PL
    - Add t/00.*
    - Update POD to change RT to GitHub
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.4.2-1
changelog:
  - Update to 1.42
    - Handle the case where the password has the utf8 bit set (GH#1)
    - Update t/basic.t to use Encode and to test the utf8 bit setting
    - Very slightly reformat the source code of PasswdMD5.pm and basic.t


author: Paul Howarth <paul@city-fan.org> - 1.4.3-1
changelog:
  - Update to 1.43
    - Replace use of the cryptographically weak rand() function with the much
      stronger Crypt::URandom::urandom() (GH#3, CVE-2026-6659, rhbz#2479575)
    - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL
    - Add files AI_POLICY.md and SECURITY.md


author: Arne Reiter <redhat@arnereiter.de> - 5.9.5-3
changelog:
  - Resolves: rhbz#2048108 - segfault at 18 ip 00007f4c7c0d841c sp 00007ffe49f61b70 error 4 in libc.so.6


author: Arne Reiter <redhat@arnereiter.de> - 5.9.6-1
changelog:
  - Resolves rhbz#2080070 strongswan-5.9.6 is available
  - Fixed missing format string in enum_flags_to_string()


author: Arne Reiter <redhat@arnereiter.de> - 5.9.8-1
changelog:
  - Resolves rhbz#2112274 strongswan-5.9.8 is available
  - Patch1 removes CFLAGS -Wno-format which interferes with -Werror=format-security
  - Add BuildRequire for autoconf and automake, now required for release
  - Remove obsolete patches


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.6-1
changelog:
  - Update to 6.0.6 to fix a bunch of security issues:
  - Resolves: rhbz#CVE-2026-25075
  - Resolves: rhbz#CVE-2026-35328
  - Resolves: rhbz#CVE-2026-35329
  - Resolves: rhbz#CVE-2026-35330
  - Resolves: rhbz#CVE-2026-35331
  - Resolves: rhbz#CVE-2026-35332
  - Resolves: rhbz#CVE-2026-35333
  - Resolves: rhbz#CVE-2026-35334
  - Resolves: rhbz#CVE-2026-25075
  - Resolves: rhbz#CVE-2025-9615
  - Resolves: rhbz#CVE-2025-62291


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


