# changelog

author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Drop capabilities if running container processes as non root
  - Print Warning message if cmd will not be used based on entrypoint
  - Update 01-intro.md
  - Shouldn't add insecure registries to list of search registries
  - Report errors on bad transports specification when pushing images
  - Move parsing code out of common for namespaces and into pkg/parse.go
  - Add disable-content-trust noop flag to bud
  - Change freenode chan to buildah
  - runCopyStdio(): don't close stdin unless we saw POLLHUP
  - Add registry errors for pull
  - runCollectOutput(): just read until the pipes are closed on us
  - Run(): provide redirection for stdio
  - rmi, rm: add test
  - add mount test
  - Add parameter judgment for commands that do not require parameters
  - Add context dir to bud command in baseline test
  - run.bats: check that we can run with symlinks in the bundle path
  - Give better messages to users when image can not be found
  - use absolute path for bundlePath
  - Add environment variable to buildah --format
  - rm: add validation to args and all option
  - Accept json array input for config entrypoint
  - Run(): process RunOptions.Mounts, and its flags
  - Run(): only collect error output from stdio pipes if we created some
  - Add OnBuild support for Dockerfiles
  - Quick fix on demo readme
  - run: fix validate flags
  - buildah bud should require a context directory or URL
  - Touchup tutorial for run changes
  - Validate common bud and from flags
  - images: Error if the specified imagename does not exist
  - inspect: Increase err judgments to avoid panic
  - add test to inspect
  - buildah bud picks up ENV from base image
  - Extend the amount of time travis_wait should wait
  - Add a make target for Installing CNI plugins
  - Add tests for namespace control flags
  - copy.bats: check ownerships in the container
  - Fix SELinux test errors when SELinux is enabled
  - Add example CNI configurations
  - Run: set supplemental group IDs
  - Run: use a temporary mount namespace
  - Use CNI to configure container networks
  - add/secrets/commit: Use mappings when setting permissions on added content
  - Add CLI options for specifying namespace and cgroup setup
  - Always set mappings when using user namespaces
  - Run(): break out creation of stdio pipe descriptors
  - Read UID/GID mapping information from containers and images
  - Additional bud CI tests
  - Run integration tests under travis_wait in Travis
  - build-using-dockerfile: add --annotation
  - Implement --squash for build-using-dockerfile and commit
  - Vendor in latest container/storage for devicemapper support
  - add test to inspect
  - Vendor github.com/onsi/ginkgo and github.com/onsi/gomega
  - Test with Go 1.10, too
  - Add console syntax highlighting to troubleshooting page
  - bud.bats: print "$output" before checking its contents
  - Manage "Run" containers more closely
  - Break Builder.Run()'s "run runc" bits out
  - util.ResolveName(): handle completion for tagged/digested image names
  - Handle /etc/hosts and /etc/resolv.conf properly in container
  - Documentation fixes
  - Make it easier to parse our temporary directory as an image name
  - Makefile: list new pkg/ subdirectoris as dependencies for buildah
  - containerImageSource: return more-correct errors
  - API cleanup: PullPolicy and TerminalPolicy should be types
  - Make "run --terminal" and "run -t" aliases for "run --tty"
  - Vendor github.com/containernetworking/cni v0.6.0
  - Update github.com/containers/storage
  - Update github.com/projectatomic/libpod
  - Add support for buildah bud --label
  - buildah push/from can push and pull images with no reference
  - Vendor in latest containers/image
  - Update gometalinter to fix install.tools error
  - Update troubleshooting with new run workaround
  - Added a bud demo and tidied up
  - Attempt to download file from url, if fails assume Dockerfile
  - Add buildah bud CI tests for ENV variables
  - Re-enable rpm .spec version check and new commit test
  - Update buildah scratch demo to support el7
  - Added Docker compatibility demo
  - Update to F28 and new run format in baseline test
  - Touchup man page short options across man pages
  - Added demo dir and a demo. chged distrorlease
  - builder-inspect: fix format option
  - Add cpu-shares short flag (-c) and cpu-shares CI tests
  - Minor fixes to formatting in rpm spec changelog
  - Fix rpm .spec changelog formatting
  - CI tests and minor fix for cache related noop flags
  - buildah-from: add effective value to mount propagation


author: Dan Walsh <dwalsh@redhat.com> 1.2-1
changelog:
  - Vendor in latest containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Add registries.conf link to a few man pages


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Michal Schorm <mschorm@redhat.com> - 5.7.20-4
changelog:
  - Provide subackage with a client static library
    Needed by mysql-connector-odbc package
  - Remove Group tag as it shouldn't be used anymore


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - Add fix for libxcrypt - do not assume "crypt()" function is provided by glibc
    Resolves: #1536881
  - Fix obsoletes using isa macro, remove the line entirely
    Resolves: #1537210


author: Fedora Release Engineering <releng@fedoraproject.org> - 5.7.21-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  - Removed 'static' library subpackage


author: Michal Schorm <mschorm@redhat.com> - 5.7.22-1
changelog:
  - Rebase to 5.7.22 version
  - CVE fixes: #1568963
              CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
              CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
              CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
              CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
              CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
              CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.13.1-52.git89b0e65
changelog:
  - Resolves: #1558425
  - built docker @projectatomic/docker-1.13.1 commit 89b0e65
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 04caa55
  - built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
  - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
  - built docker-init commit 5b117de
  - built libnetwork commit c15b372


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:1.13.1-54.git6c336e4
changelog:
  - Resolves: #1559274
  - built docker @projectatomic/docker-1.13.1 commit 6c336e4
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 04caa55
  - built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
  - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
  - built docker-init commit 5b117de
  - built libnetwork commit c15b372


author: Colin Walters <walters@verbum.org> - 2:1.13.1-55.git6c336e4
changelog:
  - Drop oci-register-machine Recommends; this broke a downstream build because
    oci-register-machine was missing systemd-nspawn as a dependency, but generally
    it has not been worth maintaining.
    See previous discussion: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2016-May/msg00051.html


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.13.1-59.gitaf6b32b
changelog:
  - built docker @projectatomic/docker-1.13.1 commit af6b32b
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 6675634
  - built docker-runc @projectatomic/docker-1.13.1 commit b425831
  - built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
  - built docker-init commit fec3683
  - built libnetwork commit 19279f0


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.13.1-60.git9cb56fd
changelog:
  - Resolves: #1598581, #1598583 - CVE-2018-10892
  - built docker @projectatomic/docker-1.13.1 commit 9cb56fd
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 20a1f68
  - built docker-runc @projectatomic/docker-1.13.1 commit b425831
  - built docker-containerd @projectatomic/docker-1.13.1 commit 42e825a
  - built docker-init commit fec3683
  - built libnetwork commit d00ceed
  - update comments in /etc/sysconfig/docker RE: registries.conf
    From: Tom Sweeney <tsweeney@redhat.com>


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2.6.2-1.git48294d9
changelog:
  - Resolves: #1474894 - CVE-2017-11468
  - bump to tag 2.6.2
  - built commit 48294d9
  - built with bundled dependencies


author: Owen Taylor <otaylor@fishsoup.net> - 2.6.2-6.git48294d9
changelog:
  - Add backported patch to support OCI manifests and image indexes (manifest lists)
    https://github.com/docker/distribution/pull/2076 as of August 31


author: Owen Taylor <otaylor@redhat.com> - 2.6.2-7.git48294d9
changelog:
  - Add fix to register the OCI Image index media type
  - https://github.com/docker/distribution/pull/2076#issuecomment-328655346


author: Dogtag PKI Team <pki-devel@redhat.com> - 10.6.1-1
changelog:
  - Rebased to PKI 10.6.1
  - Bugzilla #1559047: pki-core misses a dependency to pki-symkey
  - Bugzilla #1573094: FreeIPA external CA installation fails


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Nils Philippsen <nils@tiptoe.de> - 2:2.10.0-1
changelog:
  - version 2.10.0
  - update dependency versions
  - build with OpenEXR support
  - build with webp support
  - explicitly require perl for building
  - remove obsolete build deps: gnome-keyring-devel, libgnomeui-devel
  - don't run appdata test which requires network access


author: Nils Philippsen <nils@tiptoe.de> - 2:2.10.4-1
changelog:
  - version 2.10.4
  - byte-compile Python plug-ins separately from Fedora 29 on
  - ship gimp-test-clipboard-2.0


author: Stephen Gallagher <sgallagh@redhat.com> - prerelease-1
changelog:
  - Updating to upstream commit 1e5bb959dcc11f515d8865ece27c5fc9dd3b2d39
  - Add scripts to udpate to the latest git HEAD


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12.0-4
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jonathan Dieter <jdieter@gmail.com> - 3.13.0-0.rc1
changelog:
  - uRaft HA
  - Fixes to EC handling
  - Reduced number of secondary groups retrievals (better performance)
  - Switch to fuse3 client (better performance, writeback cache)
  - Bugfixes


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.25-1
changelog:
  - Rebase to 10.1.25
  - Disable plugins 'cracklib' and 'gssapi' by default
  - Related: #1468028, #1464070
  - Looks like the testsuite removes its 'var' content correctly,
    no need to do that explicitly.


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.30-1
changelog:
  - Fix cmake arguments (blocked debug builds)
  - Fix loading of skipped tests files (omitted ppc list)


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.7.0-2
changelog:
  - Update to 10.7.0
  - https://nodejs.org/en/blog/release/v10.7.0/
  - https://nodejs.org/en/blog/release/v10.6.0/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.11.3-2
changelog:
  - Switch back to using OpenSSL 1.0.2 for crypto
  - Resolves: rhbz#1607112 - Segmentation Fault when running upstream Antora


author: Daniel Walsh <dwalsh@redhat.com> - 0-5.13.git
changelog:
  - Disable this hook by default.
  - Not many people are using it, and it is causing some issues with Docker.


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-388
changelog:
  - Adapt tests to zlib-1.2.11 (bug #1420326)
  - Fix a crash when compiling a regexp with impossible quantifiers (RT#130561)
  - Fix a buffer overrun with format and "use bytes" (RT#130703)
  - Fix a buffer overflow when studying some regexps repeatedly
    (RT#129281, RT#129061)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-389
changelog:
  - Adapt Compress::Raw::Zlib to zlib-1.2.11 (bug #1420326)
  - Fix a heap buffer overflow when evaluating regexps with embedded code blocks
    from more than one source (RT#129881)
  - Fix a memory leak in list assignment from or to magic values (RT#130766)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-390
changelog:
  - Fix a null-pointer dereference on malformed code (RT#130815)
  - Fix an use-after-free in substr() that modifies a magic variable (RT#129340)
  - Fix a memory leak leak in Perl_reg_named_buff_fetch() (RT#130822)
  - Fix an invalid memory read when parsing a loop variable (RT#130814)
  - Fix a heap-use-after-free in four-arguments substr call (RT#130624)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-392
changelog:
  - Make File::Glob more resistant against degenerative matching (RT#131211)
  - Fix a memory wrap in sv_vcatpvfn_flags() (RT#131260)
  - Fix a crash when calling a subroutine from a stash (RT#131085)
  - Fix an improper cast of a negative integer to an unsigned 8-bit type (RT#131190)
  - Fix cloning :via handles on thread creation (RT#131221)
  - Fix glob UTF-8 flag on a glob reassignment (RT#131263)
  - Fix a buffer overflow in my_atof2() (RT#131526)
  - Fix checks for tainted directory in $ENV{PATH} if a backslash escape presents
  - Fix handling backslashes in PATH environment variable when executing
    "perl -S" (RT#129183)
  - Fix a conditional jump on uninitilized memory in re_intuit_start() (RT#131575)
  - Fix spurious "Assuming NOT a POSIX class" warning (RT#131522)
  - Provide perl-interpreter RPM dependency symbol
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.3-396
changelog:
  - Fix handling attribute specification on our variables (RT#131597)
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed filehandle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)
  - Link XS modules to pthread library to fix linking with -z defs
  - Correct shell bangs in tests
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.4-397
changelog:
  - 5.24.4 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Björn Esser <besser82@fedoraproject.org> - 4:5.26.1-404
changelog:
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-407
changelog:
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Fix a heap use after free when moving a stack (RT#131954)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-410
changelog:
  - 5.26.2 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-412
changelog:
  - perl-devel requires redhat-rpm-config because of hardened compiler profiles
    (bug #1557667)
  - Do not clobber file bytes in :encoding layer (RT#132833)
  - Fix line numbers in multi-line s/// (RT#131930)
  - Fix parsing extended bracketed character classes (RT#132167)
  - Fix a possibly unitialized memory read in the Perl parser (RT#133074)
  - Fix an infinite loop in the regular expression compiler (RT#133185)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-413
changelog:
  - Adjust tests to gdbm-1.15 (RT#133295)
  - Fix an integer wrap when allocating memory for an environment variable
    (RT#133204)
  - Fix printing a warning about a wide character when matching a regular
    expression while ISO-8859-1 locale is in effect
  - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix compilation warning from inflate.c (CPAN RT#107642)
    - Fix wrong FLAG_APPEND logic, analog to Bzip2 (CPAN RT#119007)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.071-1
changelog:
  - Update to 2.071
    - One (last?) compilation warning in bundled inflate.c (CPAN RT#119580,
      https://github.com/madler/zlib/issues/111)


author: Paul Howarth <paul@city-fan.org> - 0.03-30
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - No need to prune empty directories from the buildroot
  - Make %files list more explicit
  - Don't use macros for commands


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-402
changelog:
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix an overflow in the lexer when reading a new line (RT#131793)
  - Fix Term::ReadLine not to create spurious &STDERR files (RT#132008)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed filehandle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1.76-1
changelog:
  - Update to 1.76
    - Compatibility with OpenSSL 1.1, tested with openssl-1.1.0-pre5:
      - Conditionally remove threading locking code, not needed in 1.1
      - Rewrite code that accesses inside X509_ATTRIBUTE struct
      - SSL_CTX_need_tmp_RSA, SSL_CTX_set_tmp_rsa, SSL_CTX_set_tmp_rsa_callback,
        SSL_set_tmp_rsa_callback support not available in 1.1
      - SSL_session_reused is now native
      - SSL_get_keyblock_size modifed to use new API
      - OCSP functions modified to use new API under 1.1
      - SSL_set_state removed with 1.1
      - SSL_get_state and SSL_state are now equivalent and available in all
        versions
      - SSL_CTX_v2_new removed
      - SESSION_set_master_key removed with 1.1; code that previously used
        SESSION_set_master_key must now set $secret in the session_secret
        callback set with SSL_set_session_secret_cb
      - With 1.1, $secret in the session_secret callback set with
        SSL_set_session_secret_cb can be changed to alter the master key
        (required by EAP-FAST)
    - Added a function EC_KEY_generate_key similar to RSA_generate_key and a
      function EVP_PKEY_assign_EC_KEY similar to EVP_PKEY_assign_RSA; using
      these functions it is easy to create and use EC keys in the same way as RSA
      keys
    - Testing with LibreSSL 2.4.1
    - Provide support for cross context (and cross process) session sharing using
      the stateless TLS session tickets
    - Added documentation about downloading latest version from SVN
    - Added missing Module/install files to SVN


author: Paul Howarth <paul@city-fan.org> - 1.79-1
changelog:
  - Update to 1.79
    - Patch to fix a few inline variable declarations that cause errors for older
      compilers
    - Patch: Generated C code is not compatible with MSVC, AIX cc, probably
      others; added some PREINIT blocks and replaced 2 cases of INIT with PREINIT
    - Fix compile failure if the OpenSSL library it's built against has
      compression support compiled out
    - Added RSA_get_key_parameters() to return a list of pointers to RSA key
      internals (only available prior to OpenSSL 1.1)
    - Fix some documentation typos
    - Testing with openssl-1.1.0b


author: Paul Howarth <paul@city-fan.org> - 1.80-1
changelog:
  - Update to 1.80
    - Fix unexpected changes in the control flow of the Perl program that seemed
      to be triggered by the ticket key callback


author: Paul Howarth <paul@city-fan.org> - 1.81-1
changelog:
  - Update to 1.81
    - Enable RSA_get_key_parameters with LibreSSL - again
    - Fixed memory leak in X509_get_subjectAltNames
    - Added . to lib path in Makefile.PL to accommodate people who are using a
      perl with -Ddefault_inc_excludes_dot
    - Fixed build failure if engine support not present
    - Improvements to get_my_thread_id to work around possibility of ERRSV not
      being defined, e.g. on OpenWRT


author: Paul Howarth <paul@city-fan.org> - 1.82-1
changelog:
  - Update to 1.82
    - Added support for building under Linuxbrew (a linuxbrew version of MacOS
      Homebrew)
    - Implement SSL_CTX_set_psk_client_callback() and
      SSL_set_psk_client_callback()
    - Skip the NPN test if the SSL library is LibreSSL
    - Fixed a problem with a variable declaration in
      ssleay_session_secret_cb_invoke
    - Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when
      allocated; the same callback is used on a server side for OCSP stapling
      and in that case ocsp_response is NULL and not used
    - New feature: Added a binding
      SSL_set_session_ticket_ext_cb(ssl, callback, data); a callback used by
      EAP-FAST/EAP-TEAT to parse and process TLS session ticket
    - New feature: Added a binding SSL_set_session_ticket_ext(ssl, ticket); used
      by EAP-FAST/EAP-TEAP to define TLS session ticket value
    - Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32
      bytes instead of 16 bytes (which OpenSSL will pad with zeros up to 32
      bytes)
    - New feature: Added following bindings:
      - X509_get_ex_data(cert, idx)
      - X509_get_ex_new_index(argl, argp, new_func, dup_func, free_func)
      - X509_get_app_data(cert)
      - X509_set_ex_data(cert, idx, data)
      - X509_set_app_data(cert, arg)
      - X509_STORE_CTX_get_ex_new_index(argl, argp, new_func, dup_func, free_func)
      - X509_STORE_CTX_get_app_data(x509_store_ctx)
      - X509_STORE_CTX_set_app_data(x509_store_ctx, arg)
    - New feature: Added an implementation for
      SSL_get_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)
    - New feature: Added an implementation for
      SSL_get_peer_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)
    - Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also
      with AEAD ciphers, which don’t use digest functions
    - New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl, staple);
      used by a server side to include OCSP staple in ServerHello
    - Bugfix: SSL_OCSP_response_verify(ssl, rsp, svreq, flags): check that chain
      and last are not NULL before trying to use them
    - Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and
      lib paths
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.83-1
changelog:
  - Update to 1.83
    - Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they
      are not available on LibreSSL
    - Add support for SSL_set_default_passwd_cb* for OpenSSL 1.1.0f and later;
      LibreSSL does not support these functions, at least yet
    - Add new functions related to SSL_CTX_new
    - Add two new functions introduced in OpenSSL 1.1.0, a number of constants
      and a couple of const qualifiers to SSLeay.xs; tests and documentation .pod
      were also updated
    - Added support for SSL_use_certificate_chain_file function introduced in
      OpenSSL 1.1.0
    - Fixed LibreSSL version detection to correctly parse LibreSSL minor version
    - Fix memory leaks in OCSP handling
    - Add new functions for certificate verification introduced in OpenSSL 1.02,
      a number of constants, new test data files, new tests and updates to .pod
      documentation; the new functions provide access to the built-in wildcard
      check functionality available in OpenSSL 1.0.2 and later
    - Added X509_STORE_CTX_new and X509_verify_cert
    - SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify
      fails but the intermediate certificate succeeds


author: Paul Howarth <paul@city-fan.org> - 1.84-1
changelog:
  - Update to 1.84
    - Fixed an error in t/local/04_basic.t causing a test failure if
      Test::Exception not installed


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Preparations for transferring maintenace to a new maintainer
    - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
      OpenSSL
    - Fixed free() error that causes "Free to wrong pool ..." message on Windows


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - gailookup.pl.in: Add -P option to ease specification of port number
    - gailookup.pl.in: Add awareness of AI_ALL and AI_V4MAPPED
    - gailookup.pl.in: Add -r option to do reverse lookup
    - System inet_ntop broken in darwin (CPAN RT#113005)
    - Makefile.PL: Make Socket6 buildable on Android (CPAN RT#98181)
  - Simplify find commands using -delete
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - aclocal.m4 (IPv6_CHECK_INET_NTOP): inet_ntop(3) may return an
      IPv4-compatible IPv6 address (CPAN RT#113950)
  - BR: perl-generators


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Add test for Perl's subroutine signatures feature (GH#5)
    - Do not let get_code_location() segfault on XSUBs
  - BR: perl-devel for EXTERN.h
  - Drop EL-5 support


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Upstreamed fix for test failures on PPC and ARM (CPAN RT#83825)
    - Fix crash in syck_emit on platforms with long long pointers
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Fix handling carriage return after c-indicator (CPAN RT#41141)
    - Fix CHECK_UTF8 SEGV with empty len=0 strings (CPAN RT#61562)
    - Add missing function declarations
    - Tighten the TODO tests; no passing TODOs now, but still JSON
    - SingleQuote and \/ and \u roundtrips do fail
  - Drop EL-5 support
    - Drop Group: and BuildRoot: tags
    - Drop buildroot cleaning in %install
    - Drop explicit %clean section


author: Petr Pisar <ppisar@redhat.com> - 6:0.99.18-7
changelog:
  - Remove useless build-time dependency on ExtUtils::CBuilder
  - Fix documentation about numify() and stringify() trailing zeros
    (CPAN RT#64635, CPAN RT#122858)


author: Dogtag PKI Team <pki-devel@redhat.com> - 10.6.0-0.3
changelog:
  - Iryna Shcherbina <ishcherb@redhat.com>: Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
  - Rebased to PKI 10.6.0 beta2


author: Dan Walsh <dwalsh@redhat.com> - 0.8.2.1-1.git7a526bb
changelog:
  - Upstream 0.8.2.1 release
  - Add support for podman-docker
  - Add support for podman shipping its own conmon. Need newer version than shipped conmon package.

  -* Sat Aug 11 2018 baude <bbaude@redhat.com> - 0.8.2-1.git7a526bb
  -- Upstream 0.8.2 release


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.6-1
changelog:
  - update to 9.6.6 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-6.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.7-1
changelog:
  - update to 9.6.7 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.8-1
changelog:
  - update to 9.6.8 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-8.html


