# changelog

author: Teddysun <i@teddysun.com> - angie-1.9.0-2
changelog:
  - Updated angie-module-otel to 0.1.2
  - Updated angie-module-njs to 0.9.0
  - Updated quickjs to 19abf1888db5884a5758036ff6e7fa2b340acedc
  - Added /usr/share/angie/modules and module's configuration


author: Teddysun <i@teddysun.com> - angie-1.9.0-3
changelog:
  - Updated opentelemetry-cpp to 1.18.0
  - Updated opentelemetry-proto to 1.4.0
  - Updated modsecurity to 3.0.14
  - Updated c-ares to 1.34.5


author: Teddysun <i@teddysun.com> - angie-1.9.1-2
changelog:
  - Release 1.9.1
  - Updated angie-module-auth-spnego to v1.1.3
  - Updated angie-module-cgi to v0.12.1
  - Updated angie-module-modsecurity to v1.0.4
  - Updated angie-module-opentracing to v0.40.0


author: Teddysun <i@teddysun.com> - angie-1.10.0-2
changelog:
  - Release 1.10.0
  - Updated angie-module-cgi to v0.13
  - Updated opentelemetry-cpp to 1.19.0
  - Updated opentelemetry-proto to 1.5.0


author: Teddysun <i@teddysun.com> - angie-1.9.1-2
changelog:
  - Release 1.9.1
  - Updated angie-module-auth-spnego to 1.1.3
  - Updated angie-module-cgi to 0.12.1
  - Updated angie-module-modsecurity to 1.0.4
  - Updated angie-module-opentracing to 0.40.0


author: Teddysun <i@teddysun.com> - angie-1.10.0-2
changelog:
  - Release 1.10.0
  - Updated angie-module-cgi to 0.13
  - Updated opentelemetry-cpp to 1.19.0
  - Updated opentelemetry-proto to 1.5.0


author: Teddysun <i@teddysun.com> - angie-1.10.2-2
changelog:
  - Release 1.10.2
  - Added angie-module-auth-totp
  - Added angie-module-combined-upstreams
  - Updated angie-module-opentacing to v0.41.0


author: Teddysun <i@teddysun.com> - angie-1.10.3-2
changelog:
  - Release 1.10.3
  - Updated angie-module-cache-purge to 2.5.4
  - Updated angie-module-cgi to v0.14.1
  - Updated angie-module-lua to 0.10.29
  - Updated angie-module-njs to 0.9.4


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.6.1-1
changelog:
  - Release 1.6.1
  - Updated angie-module-opentracing to v0.35.3
  - Updated angie-module-zstd to f4ba115e0b0eaecde545e5f37db6aa18917d8f4b


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.8.0-1
changelog:
  - Release 1.8.0
  - Added angie-module-http-auth-radius
  - Updated angie-module-auth-jwt to 0.8.0
  - Updated angie-module-jwt to v3.4.2
  - Updated angie-module-njs to 0.8.8
  - Updated angie-module-opentracing to v0.38.0
  - Updated angie-module-wasm to v0.1-beta5


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.8.1-2
changelog:
  - Added angie-module-unbrotli
  - Updated angie-module-auth-spnego to v1.1.2
  - Updated angie-module-headers-more to v0.38
  - Updated angie-module-lua to 0.10.28
  - Updated angie-module-njs to 0.8.9
  - Updated angie-module-vts to v0.2.3
  - Updated angie-module-wasm to v0.2-beta2


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.8.3-1
changelog:
  - Release 1.8.3
  - Updated angie-module-cgi to 57f660bb2c6ef6e4b75c65406080d0236860ca08
  - Updated angie-module-jwt to v3.4.3
  - Updated angie-module-ndk to v0.3.4
  - Updated angie-module-opentracing to v0.39.0


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-10
changelog:
  - add LMDB support and use it on Fedora >= 40
  - Resolves: #1779267 - Remove libdb dependency from apr-util


author: Neil Hanlon <neil@shrug.pw> - 1.37.0-1
changelog:
  - update to 1.37 (fedora#2249918)
  - change URL to aria2 organization as it was moved from the prior org


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Frédéric Bérat <fberat@redhat.com> - 2.72-1
changelog:
  - Rebase to version 2.72 (#2255664)
  - Drop upstream patches
  - Exclude AC_SYS_LARGEFILE, AC_SYS_YEAR2038, AC_SYS_YEAR2038_RECOMMENDED for ix86


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.19-3.1
changelog:
  - Update containerd binary to v1.7.19
  - Update Golang runtime to 1.21.12, which includes a fix for CVE-2024-24791.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.22-3.1
changelog:
  - Update containerd binary to v1.7.22
  - Update runc binary to v1.1.14
  - Update Golang runtime to 1.22.7


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.24-3.1
changelog:
  - Update containerd binary to v1.7.24
  - Update systemd unit to start containerd service after dbus.service
  - Update runc binary to v1.2.2


author: Paweł Gronowski <pawel.gronowski@docker.com> - 1.7.25-3.1
changelog:
  - Update containerd binary to v1.7.25
  - Update runc binary to v1.2.4
  - Update the license fields to use the recommented SPDX identifier


author: Teddysun <i@teddysun.com> - 8.4.0-2
changelog:
  - HTTP3 enabled (ngtcp2 + nghttp3) if fedora > 33 or rhel > 8
  - Option --with-gnutls replaced --with-openssl if fedora > 33 or rhel > 8


author: Teddysun <i@teddysun.com> - 8.9.1-2
changelog:
  - Support feature gsasl
  - Support feature zstd
  - HTTP3 enabled (openssl3 + nghttp3) when rhel == 8
  - Build with openssl3 when rhel == 8


author: Teddysun <i@teddysun.com> - 8.15.0-2
changelog:
  - Add configure options:
    --enable-netrc --enable-dnsshuffle --enable-ares --enable-httpsrr
    --enable-ipfs --enable-ssls-export --enable-curldebug


author: Teddysun <i@teddysun.com> - 8.4.0-2
changelog:
  - HTTP3 enabled (ngtcp2 + nghttp3) if fedora > 33 or rhel > 8
  - option --with-gnutls replaced --with-openssl if fedora > 33 or rhel > 8


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Teddysun <i@teddysun.com> - 2:1.28.0-1
changelog:
  - update to 1.28.0
  - http_image_filter_module is not dynamic module anymore
  - http_perl_module is not dynamic module anymore
  - http_xslt_filter_module is not dynamic module anymore
  - mail_module is not dynamic module anymore
  - stream_module is not dynamic module anymore


author: Teddysun <i@teddysun.com> - 2:1.29.3-2
changelog:
  - Add tmpfiles.d rules for /var directories (bootc compatibility)
  - Fix missing HTTP_HOST variable when using nginx with HTTP/3.
    Add the following line to fastcgi_params & fastcgi.conf
    fastcgi_param  HTTP_HOST          $host;
    See also: https://github.com/nginx/nginx/issues/455


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - RFE: ProxyWebsocketIdleTimeout from httpd mod_proxy_wstunnel


author: Teddysun <i@teddysun.com> - 2.4.65-3
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode


author: Teddysun <i@teddysun.com> - 2.4.65-5
changelog:
  - Resolves: RHEL-33734 - mod_ssl: disable ENGINE support
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed


author: Teddysun <i@teddysun.com> - 2.4.65-6
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level required for VirtualHost matching.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Paul Wouters <paul.wouters@aiven.io> - 4.12-1
changelog:
  - Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
  - Resolves: rhbz#2230225 libreswan-4.12 is available


author: Paul Wouters <paul.wouters@aiven.io> - 4.12-2
changelog:
  - Remove ipsec show and ipsec verify sub commands (not very useful, causes python requirement)
  - Patch for handling libcap-ng return values and fix capng_apply() call


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 2.4-13.20160224.gitfa8646d
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  - Remove Group tag
  - Add BuildRequires:  gcc


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.12-5
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-4
changelog:
  - Patch whitespace in spec file
  - Fix syntax for applying patches during rpm build
  - Bump BuildRequires to use pcre2-devel


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-8
changelog:
  - Rebase to upstream be1e01ea173defc9837bd1b90dc72ed63c8131e7
  - Remove patches that were merged upstream
  - BZ2249532 - Fix tilde operator


author: Richard W.M. Jones <rjones@redhat.com> - 2.4.16.3-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: josef radinger <cheese@nosuchhost.net> - 1.2.0-2
changelog:
  - cleanup specfile
  - change path to github
  - add Buildrequires for automake, libtool, libjwt-devel
  - add apache-module-conf


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Ondrej Sloup <osloup@redhat.com> - 5.0-1
changelog:
  - Use autosetup
  - Change source links
  - Redo patch files and remove obsolete ones
  - Add runtests.sh
  - Rebase to the latest upstream version (rhbz#1924029)


author: Felix Kaechele <felix@kaechele.ca> - 2:1.26.3-1
changelog:
  - update to 1.26.3
  - fixes SSL session reuse vulnerability (CVE-2025-23419)
  - drop zlib-ng patch, the issue was addressed upstream


author: Teddysun <i@teddysun.com> - 2:1.29.3-2
changelog:
  - Fix missing HTTP_HOST variable when using nginx with HTTP/3.
    Add the following line to fastcgi_params & fastcgi.conf
    fastcgi_param  HTTP_HOST          $host;
    See also: https://github.com/nginx/nginx/issues/455


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Simon Pichugin <spichugi@redhat.com> - 2.4.46-19
changelog:
  - Bump version to 2.4.46-19
  - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function


author: Teddysun <i@teddysun.com> - 1.27.1.2-2
changelog:
  - added configure options: --with-stream_realip_module, --with-http_image_filter_module, --with-http_xslt_module


author: Teddysun <i@teddysun.com> - 1.29.1.1-2
changelog:
  - Rebuild openresty 1.29.1.1 with OpenSSL 3.5.3
  - update resty-cli & luajit2
  - bugfix: add HTTP/3 QUIC SSL Lua yield patch macro protection.


author: Teddysun <i@teddysun.com> - 1.29.1.1-4
changelog:
  - Modify SERVER_SOFTWARE default value in fastcgi.conf
  - Add option --with-http_degradation_module, --with-pcre, --with-http_ssl_module


author: Teddysun <i@teddysun.com> - 1.29.1.1-2
changelog:
  - Rebuild openresty 1.29.1.1 with OpenSSL 3.5.3
  - update resty-cli to 0.32
  - update luajit2 to 2.1-20250826
  - bugfix: add HTTP/3 QUIC SSL Lua yield patch macro protection.


author: Teddysun <i@teddysun.com> - 1.29.2.1-2
changelog:
  - upgraded ngx_devel_kit to 0.3.4
  - upgraded ngx_http_redis to 0.41
  - upgraded opm to 0.0.9
  - upgraded lua-cjson to 2.1.0.15
  - upgraded lua-resty-websocket to 0.13


author: Teddysun <i@teddysun.com> - 1.29.3.1-2
changelog:
  - upgraded luajit2 to version 2.1-20251030
  - upgraded lua-nginx-module to version 0.10.29
  - upgraded stream-lua-nginx-module to version 0.0.17
  - upgraded lua-resty-core to version 0.1.32


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: David Sommerseth <davids@openvpn.net> - 2.6.7-1
changelog:
  - Update to upstream OpenVPN 2.6.7
  - Fixes CVE-2023-46849, CVE-2023-46850
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)
  - Fix regression of systemctl scriptlet globbing issues (RHBZ#1887984); reintroduced in openvpn-2.6.0-1


author: David Sommerseth <davids@openvpn.net> - 2.6.8-1
changelog:
  - Update to upstream OpenPVN 2.6.7
  - Fixes a regression from 2.6.7 resulting in a SIGSEGV (GitHub#449)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.42-1
changelog:
  - Rebase to version 10.42
  - RISC-V is JIT enabled according to the https://github.com/PCRE2Project/pcre2/issues/14


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.14-1
changelog:
  - Resolves: rhbz#2254560 CVE-2023-41913 buffer overflow and possible RCE
  - Resolved: rhbz#2250666 Update to 5.9.14 (IKEv2 OCSP extensions, seqno/regno overflow handling
  - Update to 5.9.13 (OCSP nonce set regression configuration option charon.ocsp_nonce_len)
  - Update to 5.9.12 (CVE-2023-41913 fix, various IKEv2 fixes)


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Teddysun <i@teddysun.com> - 43-1
changelog:
  - Initial version 43 
  - commit: https://github.com/pymumu/smartdns/commit/a19ac7eb075a772dd6981ab40d7b3f524587fc3d


author: Teddysun <i@teddysun.com> - 45-1
changelog:
  - Update version to 45
  - commit: https://github.com/pymumu/smartdns/commit/9ee27e7ba2d9789b7e007410e76c06a957f85e98


author: Teddysun <i@teddysun.com> - 46-1
changelog:
  - Update version to 46
  - commit: https://github.com/pymumu/smartdns/commit/07c13827bb523519a638214ed7ad76180f71a40a


author: Teddysun <i@teddysun.com> - 46.1-1
changelog:
  - Update version to 46.1
  - commit: https://github.com/pymumu/smartdns/commit/b525170bfd627607ee5ac81f97ae0f1f4f087d6b


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: #2294354 - CVE-2024-37894 squid: Out-of-bounds write error may
    lead to Denial of Service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Teddysun <i@teddysun.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Michal Schorm <mschorm@redhat.com> - 1.16.0-21
changelog:
  - Build against the 'mariadb-connector-c-devel' package
    https://bugzilla.redhat.com/show_bug.cgi?id=2241091


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.5.0-1
changelog:
  - New upstream release
  - Moved somethings around to make the diff from the upstream spec less
  - Upped some memory requirements in some of the tests. Necessary on aarch64 and ppc64le (and ppc32)
  - Reduced number of parallel jobs on s390x builders as builds tend to fail when stressed
  - Retired armv7hl


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.7.0-2
changelog:
  - Fix for eln build (merged from yselkowitz)
  - Fix for failing h2 switch check. Enabling full test suite again


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Joe Doss <joe@solidadmin.com> - 1.0.20210914-1
changelog:
  - contrib/launchd: fix xml syntax error
  - wg-quick: darwin: account for "link#XX" gateways
  - ipc: add wireguard-nt support
  - ipc: cache windows lookups to avoid O(n^2) with nested lookups
  - ipc: remove windows elevation
  - ipc: windows: don't display disabled adapters
  - ipc: windows: use devpkey instead of nci for name
  - wg-quick: android: adjust for android 12
  - wg-quick: openbsd: set DNS with resolvd(8)


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5.7.2-2
changelog:
  - RHBZ#2308628 RHBZ#2308629 RHBZ#2308630 RHBZ#2308631 fixed in 5.7.2 release
  - fips macro patch no longer needed


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


