# changelog

author: José Expósito <jexposit@redhat.com> - 3.01-2
changelog:
  - Use mesa-compat-libOSMesa on Fedora 42 and later
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2373991


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Emir Akdag <infraw.linux@proton.me> - 3.1.0-1
changelog:
  - Update to 3.1.0 (Complete rewrite in Rust) - Package transitioned from
    Python to Rust - Vendored Rust dependencies due to missing crates in
    Fedora - Skipped hardcoded file-path doctests in %check


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Steven Presti <spresti@redhat.com> - 2.27.0-1
changelog:
  - New Release
  - Butane config transpiler merged into Ignition repository
  - Butane now follows Ignition version numbering
  - Drop Patch0 (fix merged upstream)
  - Drop legacy fcct/fedora-coreos-config-transpiler provides


author: Paulo Alcantara <paalcant@redhat.com> - 7.6-2
changelog:
  - cifs.upcall: fix regression with kerberos mounts
  - Resolves: rhbz#2497446
  - Resolves: rhbz#2496963
  - Resolves: rhbz#2489808 - CVE-2026-12505


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 366-1
changelog:
  - Networkmanager: Don't activate new network connections by default
  - Networkmanager: Navigate to details page after creation
  - Translations and dependency updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Resolves: rhbz#2510870
  - Resolves CVE-2026-34986: rhbz#2455652
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-6
changelog:
  - Document elf exception
  - The elf inspection in rpminspect apparently does not implement the
    'ignore' feature. CRI-O does have TEXTREL which elf marks as bad. The
    --skip-textrel option for annocheck works.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-8
changelog:
  - Add internal/version.buildCommit to GO_LDFLAGS
  - Add the upstream 'internal/version.buildCommit' flag to GO_LDFLAGS using
    %{release} as the value


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.3-1
changelog:
  - Update to release v1.36.3
  - Resolves: rhbz#2510870
  - Resolves  CVE-2026-15809: rhbz#2500983
  - Upstream fixes


author: Pavel Valena <pvalena@redhat.com> - 111-2
changelog:
  - fix(base): escape die() message in emergency hook script
  - fix(base): replace eval with safe variable indirection in splitsep and export_n
  - spec: json support for dracut-install (needed for detecting dlopen dependencies)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 111-2
changelog:
  - fix(devicetree-firmware): include soc specific firmwares in install_generic()
  - fix(devicetree-firmware): include Qualcomm X2 laptop model specific firmwares


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch
  - Add gelf.3 to %files
  - Enable eu-stacktrace on aarch64
  - Rename elfutils-default-yama-scope subpackage to yama-ptrace-enable,
    drop Requires on elfutils-libs, add Recommends on elfutils main
    package for FESCo Change #3569 (rhbz#2448388)


author: Aaron Merey <amerey@redhat.com> - 0.196-1
changelog:
  - Upgrade to upstream elfutils 0.196 (rhbz#2516216)
  - Obsolete all versions of elfutils-default-yama-scope so that the
    package from an older Fedora is removed on upgrade (rhbz#2515161)
  - Add eu-stackprof, a new tool for collecting systemwide stacktrace
    profiles, on x86/ARM
  - Remove the experimental eu-stacktrace tool along with the
    sysprof-capture-devel build dependency
  - Add libpfm-devel build dependency for eu-stackprof


author: Peter Lemenkov <lemenkov@gmail.com> - 27.3.4.16-1
changelog:
  - Ver. 27.3.4.16

  8 Mon Jul 27 2026 Peter Lemenkov <lemenkov@gmail.com> - 27.3.4.15-1
  - Ver. 27.3.4.15


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Vincent Mihalkovic <vmihalko@redhat.com> - 5.48-3
changelog:
  - Allow external decompressors to execute under Landlock
  - Migrate Python bindings to pyproject macros
    Resolves: rhbz#2513643
    Resolves: rhbz#2427330
    Resolves: rhbz#2378541


author: Martin Stransky <stransky@redhat.com> - 154.0-4
changelog:
  - Backported fix for HDR crash when HLG transform is missing
    (and it's always missing!).
  - Backported HDR fix for GL framebuffer (D318191).


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-16
changelog:
  - Convert License tag to SPDX
  - Add a patch to make generated code fallback to localhost if no DNS servers are specified
  - Add a patch to fix symbols being wrongly marked as unused


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Ondrej Holy <oholy@redhat.com> - 2.11.7-16
changelog:
  - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855,
    CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530,
    CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534,
    CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948,
    CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679,
    CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952,
    CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951,
    CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884,
    CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985,
    CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and
    CVE-2026-68580)
    Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903
    Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794
    Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821
    Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324
    Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243
    Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422
    Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683
    Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2437^20260630.5223a47630df-1
changelog:
  - Update to version 2437
  - Correct and improve License expressions and license text file handling
  - Deal with upstream vendoring of a header from the Rust cxx crate
  - Invoke ninja via the %ninja_build macro


author: Leo Sandoval <lsandova@redhat.com> - 2.12-69
changelog:
  - mm: try allocating regions above defined limit as last resource
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2263643
  - Related: #2427945
  - Related: #2422881
  - Related: #2453022
  - Related: #2451630
  - Related: #2450672


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-4
changelog:
  - Fix some issues with thumb shift mode
  - return False for thumb-shift release keys
  - Add super key support for thumb shift mode


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.35~alpha2-4
changelog:
  - Fix typo in ibus-compose
  - Merge ibus-2444009-wayland-xkb-lv-tilde.patch
  - Fix CapsLock between focus changes in Wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.35~beta1-1
changelog:
  - Resolves: #2512529 GTK 4.23.3 apps cause SIGSEGV with ibus-gtk4
  - Implement forward-key-event in Wayland input-method V2
  - Fix some issues in ibus-keypress


author: David Howells <dhowells@redhat.com> 0.7-1
changelog:
  - aklog-kafs: Update the cmdline options to be closer to standard aklog.
  - aklog-kafs: Reduce verbosity.
  - aklog-kafs: Allow the destination keyring to be specified.
  - aklog-kafs: Do better default keyring handling.
  - aklog-kafs: Improve error messages.
  - kafs-preload: Add a debug cmdline option and reduce some verbosity.
  - kafs-check-config: Use the kernel's rootcell if no cell specified.
  - Convert most manpages to POD form and supply a generation script.
  - kafs-check-config: Fix a missing inclusion of unistd.h.
  - lib: Fix a modification of a read-only string.
  - Move to using autoconf when building.
  - Generate manpages during the build.
  - kafs-preload: Honour the show_cell setting on each cell.
  - Add SPDX licence tags.
  - Remove the street address from the LICENCE file.


author: David Howells <dhowells@redhat.com> 0.8-1
changelog:
  - Updated cellservdb.
  - spec: Change to new format licence tag.
  - spec: Buildrequire make.
  - spec: Remove dep on filesystem-afs rpm.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.d58772d8520c.54]
changelog:
  - Clean up unnecessary pending entries (Justin M. Forbes)
  - Turn on CONFIG_CRYPTO_MLDSA for Fedora (Justin M. Forbes)
  - Linux v7.2.0-0.rc7.d58772d8520c


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-60]
changelog:
  - dracut-virt.conf: change systemd-pcrphase to systemd-pcrextend (Vitaly Kuznetsov)
  - redhat/kernel.spec.template: Switch UKI addons to using UKI cert (Vitaly Kuznetsov)
  - Linux v7.2.0


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.2.1-0]
changelog:
  - Initial setup for stable Fedora release (Justin M. Forbes)
  - Reset Makefile.rhelver for the 7.3 cycle (Justin M. Forbes)
  - Merge configs into common for 7.2 (Justin M. Forbes)
  - redhat/configs: automotive: enable RTC_DRV_PL031 (Eric Chanudet)
  - redhat: name the dtb and UKI arch lists (Jan Stancek)
  - redhat: use one spelling for the nobuildarches files guard (Jan Stancek)
  - redhat: drop stale ppc64 from the kabidw-base arch list (Jan Stancek)
  - redhat: document the kabichk force-off as a seasonal toggle (Jan Stancek)
  - redhat: use one spelling for the include and gemini conditionals (Jan Stancek)
  - redhat: remove unused elf_image_install_path and duplicate defines (Jan Stancek)
  - redhat: drop the dead kernel-tools __requires_exclude python filter (Jan Stancek)
  - redhat: drop the Fedora 41 cross-build gdb-index workaround (Jan Stancek)
  - redhat: drop stale build switches from dist-perf and dist-rpm-baseonly (Jan Stancek)
  - redhat: give kernel-automotive its own summary (Jan Stancek)
  - redhat: drop leftover kernel_kvm_post calls for rt-64k (Jan Stancek)
  - redhat: restore missing summary of the kernel-debug variant (Jan Stancek)
  - redhat: fix parse error in baseonly sanity check message (Jan Stancek)
  - Linux v7.2.1


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-7
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395


author: Julien Rische <jrische@redhat.com> - 1.22.2-10
changelog:
  - GSSAPI: allow using cached S4U2Self ticket to itself
  - Add auto_fast_armor realm variable for FAST


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.37.0-1
changelog:
  - Add initial Kubernetes 1.37.0 release
  - Initial release for Fedora
  - Urgent (must read) upgrade notes at: https://github.com/kubernetes/kubern
    etes/blob/master/CHANGELOG/CHANGELOG-1.37.md#urgent-upgrade-notes
  - New features, enhancements, and fixes


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.8-3
changelog:
  - Build the IDE for all widgetsets, not just GTK2
  - Suffix qt5pas/qt6pas versions with Lazarus version instead of abusing the Release number


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Remi Collet <remi@remirepo.net> - 1.1.4-12
changelog:
  - fix FTBFS #2504281
  - add patch for Sphinx 9 from
    https://github.com/awesomized/libmemcached/pull/159
  - re-license spec file to CECILL-2.1


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Andreas Schneider <asn@redhat.com> - 0.26.10-1
changelog:
  - Update to version 0.26.10
  - https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.10
  - resolves: rhbz#2479963


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.8-4
changelog:
  - Move the license file to lua-libs, so it is always present if any combination of subpackages is installed
  - Fixes: rhbz#2418960


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-15
changelog:
  - Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling
    Resolves: #2513829


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 3.125.0-2
changelog:
  - fix the nspr version to full expansion
  - affected: https://bugzilla.redhat.com/show_bug.cgi?id=2488324


author: Rostislav Krasny <rostiprodev@gmail.com> - 3.125.0-2
changelog:
  - Reseed the freebl DRBG after fork() so forked children do not replay the
    parent's random stream (Firefox fork server duplicate UUIDs / crypto output)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.0~beta1-5
changelog:
  - Mark release as beta1 according to upstream naming.
  - Update requirements for better backward compatibility


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.1-3
changelog:
  - We use FIPS provider from a separate package and can drop
    FIPS-specific patches and stop building OpenSSL native FIPS provider


author: Pavol Žáčik <pzacik@redhat.com> - 1:4.0.1-5
changelog:
  - Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
    (Backport from https://github.com/openssl/openssl/commit/4360d53)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Paul Howarth <paul@city-fan.org> - 2:1.66-1
changelog:
  - Update to 1.66 (rhbz#2346459)
    - Require Specio 0.50
      - That release has a bug fix for validation of integer values
      - Without the fix, DateTime could accept non-integer values for things like
        nanoseconds (GH#145)


author: Paul Howarth <paul@city-fan.org> - 2:1.67-1
changelog:
  - Update to 1.67 (rhbz#2526041)
    - Documented that the 'truncate' method can throw a fatal error if the
      truncation produces a datetime that doesn't exist in the local time zone,
      which can happen when truncating to a day (or more) in a time zone with a
      DST transition at midnight (GH#155)
    - Documented that 'rfc3339' does not include nanoseconds (GH#150)
    - Fixed docs for 'strftime' to remove the bit that said it returned the same
      values as the POSIX 'strftime'; this hasn't been the case for a long time
      (GH#148)


author: Remi Collet <remi@remirepo.net> - 2.4.0-1
changelog:
  - update to 2.4.0
  - raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
  - run upstream test suite without server


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main python package
  - New subpackages: root-graf3d-glad, root-net-curl,
    root-tmva-sofie-parser-python, root-tree-ml, root-histv7util
  - Dropped patches: 2
  - New patches: 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-5
changelog:
  - Use the system civetweb library since it now supports web sockets
  - Drop the davix module for Fedora 45+ (davix will soon be retired)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.04-1
changelog:
  - Update to 6.40.04
  - The root-roofit-jsoninterface package was merged with root-roofit-hs3
  - Fix calculation of kerning distances in generated PDF files
  - Dropped patches: 1
  - New patches: 2


author: Dmitry Belyavskiy <beldmit@gmail.com> - 6.11.1-4
changelog:
  - Backport of upstream OpenSSL4 commit
    https://github.com/qt/qtbase/commit/e806630e694d89f567cffa9c982d1f471089ecd8


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Tom Callaway <spot@fedoraproject.org> - 2.1.1-1
changelog:
  - update to 2.1.1
  - bump libtiff to 4.7.2 (the tkimg libtiff library glue still versions at 4.7.1, because I didn't want to break compat when/if upstream makes a similar change)


author: Remi Collet <remi@remirepo.net> - 9.1.1-1
changelog:
  - Valkey 9.1.1 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639
  - own /etc/logrotate.d as its owner is an optional dependency
  - refresh the documentation
  - drop OpenSSL 4 patch merged upstream


author: Remi Collet <remi@remirepo.net> - 9.1.2-1
changelog:
  - Valkey 9.1.2 - Released Mon 31 August 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Michel Lind <salimma@centosproject.org> - 0.4-1
changelog:
  - Update to version 0.4
  - Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
    querying KASLR


author: Michel Lind <salimma@centosproject.org> - 0.5-1
changelog:
  - Update to version 0.5
  - Apply build flags consistently
  - Update licenses to account for bundled dependencies


author: Michel Lind <salimma@centosproject.org> - 0.5-2
changelog:
  - fix to show SHA commit in help text
  - also ensure `make install` uses the right build flags
  - include all bundled projects' licenses


author: Michel Lind <salimma@fedoraproject.org> - 0.5-3
changelog:
  - Drop rust_arches; no longer needed. But limit builds to the architectures
    strobelight-libs supports


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


