# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.55-1
changelog:
  - Update to 3.1.55: Fixes GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj,
    GHSA-956x-8gvw-wg5v, GHSA-rwj8-pgh3-r573, GHSA-3rp5-jjmw-4wv2,
    GHSA-r9mr-m37c-5fr3, GHSA-fjr4-x663-mwxc, GHSA-6p8h-3wgx-97gf, and
    GHSA-94p4-4cq8-9g67


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.59-1
changelog:
  - Update to 3.1.59 (close RHBZ#2499503)
  - Fixes GHSA-5xxx-qhh7-9287, GHSA-3wxw-xv34-2frg, GHSA-8mcc-hrx5-hvxc,
    GHSA-284h-m62q-gf8w, GHSA-7833-fr7j-v32q, GHSA-hh9p-6wh2-4mfc,
    GHSA-9rj7-rf2p-w77r, GHSA-4gmw-gg2m-w46p, GHSA-wvpp-8hx9-p66j,
    GHSA-jm78-9fvv-mhgr, GHSA-hmq2-w58f-27jc, GHSA-3f7w-8rr8-f37f,
    GHSA-539m-9xh6-q6rr, and GHSA-p538-c434-8v24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.60-1
changelog:
  - Update to 3.1.60; close RHBZ#2523750
  - Fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Miroslav Suchý <msuchy@redhat.com> 1.74-1
changelog:
  - remove LicenseRef-Romio as it equals to SPDX ID mpich2
  - add public domain dedication from gstreamer1-plugins-bad-free
  - add public domain dedication from openmpi
  - add LICENSE.QualcommAtheros_ar3k from linux-firmware to firmware.txt
  - add text to LicenseRef-* licenses
  - add public domain dedication from rb_libtorrent
  - add LicenseRef-BSD-TPM as not-allowed
  - add LicenseRef-Hippocratic-3.0 as not-allowed
  - add LICENSE.i915 from linux-firmware to firmware.txt
  - add LICENCE.IntcSST2 from linux-firmware to firmware.txt
  - add LicenseRef-ECMA-spec license
  - add NPL-1.1 license
  - rename LGPL-2.1-or-later_WITH_AdditionRef-Fedora-Temporary-Simple-Library-
    exception to final LGPL-2.1-or-later_WITH_Simple-Library-Usage-exception
  - rename LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib to ALGLIB-
    Documentation
  - rename AGPL-3.0-or-later_WITH_AdditionRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817 to AGPL-3.0-or-later_WITH_PS-or-PDF-font-
    exception-20170817
  - add firmware license from linux-firmware - LICENSE.amdnpu
  - add firmware license from linux-firmware - LICENCE.Marvell
  - add firmware license from linux-firmware - LICENCE.OLPC
  - add firmware license from linux-firmware - LICENCE.ti-connectivity
  - add firmware license from linux-firmware - LICENCE.xc4000
  - add firmware license from linux-firmware - LICENCE.adsp_sst
  - add LICENCE.mediatek from linux-firmware to firmware.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.75-1
changelog:
  - add MIT WITH fmt-exception
  - add LicenseRef-Remix-icon-license-1.0 as not-allowed
  - add LPD-document as allowed-content
  - add public domain dedication from tcputils
  - add GPL-2.0-only WITH eCos-exception-2.0 as allowed
  - rename temporary AdditionRef-WebM-patent-license to Google-Patent-WebM
  - Add public-domain dedication for python-rnc2rng
  - add public domain dedication from enchant
  - Add rocq-doc as known exception to OPUBL-1.0
  - add GPL-3.0-or-later WITH CGAL-linking-exception
  - replace temporary ID with sqlitestudio-OpenSSL-exception
  - add gstreamer1-doc as known exception to OPUBL-1.0
  - add public domain dedication from fcitx5-mozc
  - add public domain dedication from bsd-games


author: Miroslav Suchý <msuchy@redhat.com> 1.76-1
changelog:
  - Add dotnet11.0 to the LicenseRef-ISO-8879 list
  - add atc-game
  - Rename ODbl-1.0 -> ODbL-1.0
  - add LGPL-2.1-or-later WITH Spelling-Provider-LGPL-exception
  - add LicenseRef-Eirene as not allowed
  - add GPL-2.0-or-later_WITH_CLISP-exception-2.0
  - add Informatica
  - update links to new location at forge.fedoraproject.org
  - Add intel_vpu
  - Update to add LICENCE.atheros_firmware
  - add GPL-3.0-or-later WITH Autoconf-exception-3.0 as allowed


author: Ondrej Holy <oholy@redhat.com> - 2.11.7-7
changelog:
  - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855,
    CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530,
    CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534,
    CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948,
    CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679,
    CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952,
    CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951,
    CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884,
    CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985,
    CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and
    CVE-2026-68580)
    Resolves: rhbz#2430915, rhbz#2430904, rhbz#2430894, rhbz#2430910, rhbz#2430899
    Resolves: rhbz#2430920, rhbz#2430929, rhbz#2429792, rhbz#2429801, rhbz#2429782
    Resolves: rhbz#2443144, rhbz#2442971, rhbz#2429780, rhbz#2429796, rhbz#2429786
    Resolves: rhbz#2438258, rhbz#2438256, rhbz#2438252, rhbz#2438320, rhbz#2438253
    Resolves: rhbz#2438254, rhbz#2438251, rhbz#2438261, rhbz#2447392, rhbz#2453241
    Resolves: rhbz#2453238, rhbz#2442802, rhbz#2442800, rhbz#2447427, rhbz#2447430
    Resolves: rhbz#2447411, rhbz#2447414, rhbz#2453245, rhbz#2442807, rhbz#2491684
    Resolves: rhbz#2510294, rhbz#2510645, rhbz#2503644, rhbz#2510446


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2437^20260630.5223a47630df-1
changelog:
  - Update to version 2437
  - Correct and improve License expressions and license text file handling
  - Deal with upstream vendoring of a header from the Rust cxx crate
  - Invoke ninja via the %ninja_build macro


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Paul Howarth <paul@city-fan.org> - 1.6700-1
changelog:
  - Update to 1.67
    - Fixed ASEGR.pm; web site redesigned, URL used for data was no longer
      working (GH#509)
    - Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)
    - Added a new module to fetch data from SwissFundData (GH#515)
    - Handle no trade date in BorsaItaliana.pm (GH#528)
    - Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm
    - Fixed MorningstarCH.pm
    - Fixed MorningstarUK.pm
  - Package new CONTRIBUTING.md file


author: Paul Howarth <paul@city-fan.org> - 1.6800-1
changelog:
  - Update to 1.68
    - Changes to AlphaVantage.pm and CurrencyRates/AlphaVantage.pm to throttle
      queries (GH#546)
    - YahooJSON.pm: Add additional fields/labels (GH#544)
    - New module USBonds.pm
    - MarketWatch.pm: Added headers to fix 401 code (GH#542)
    - Modified AEX.pm to return no data available if currency indicator is '%'
      (bonds return percentage of par/facevalue) (GH#539)
    - Fixed YahooWeb.pm (GH#533, GH#538)
    - Removed CMBChina.pm - no longer working (GH#534)
    - Rewrote Union.pm for URL that returns JSON (GH#516)
    - Modified parsing in BVB.pm (GH#513)


author: Paul Howarth <paul@city-fan.org> - 1.6900-1
changelog:
  - Update to 1.69
    - Sinvestor.pm: Trim whitespace before parsing date and price
    - XETRA.pm: Trim whitespace from date-time before extracting the actual date
      value (GH#557)
    - Modified Stooq.pm to send cookies
      - Stooq requires European visitors to their website to accept cookies
      - Cookies are set using JavaScript
      - Current version of module hard codes these cookies gleaned from a browser
        session
      - Added CurrencyRates/TwelveData.pm


author: Paul Howarth <paul@city-fan.org> - 1.7000-1
changelog:
  - Update to 1.70
    - New module Finnhub.pm: Fetches quotes from https://finnhub.io using a free
      personal-use API key
    - GoogleWeb.pm: Adapt to the redesigned Google Finance site
    - Tradegate.pm: Remove explicit "our $VERSION" assignment that collided with
      the dzil-injected version, producing a duplicate declaration and an
      "our variable $VERSION redeclared" warning; use a bare # VERSION
      marker like the other modules
    - Tradegate.pm: Trim whitespace before parsing date and time
    - Added CurrencyRates/Frankfurter
    - Removed AEX.pm: Euronext.com added JavaScript based anti-webscraping
    - Added CurrencyRates/UniRate.pm


author: Paul Howarth <paul@city-fan.org> - 1.7100-1
changelog:
  - Update to 1.71
    - NZX.pm: Fixed JSON mapping (GH#586)
    - IndiaMutual.pm: Update AMFI NAV file parsing to 8-column format with Plan
      and Option fields (GH#584)
    - Removed MorningstarCH.pm (GH#582)
    - Removed MorningstarUK.pm (GH#579)
    - IndiaMutual.pm: Add support for SIF quotes from AMFI (GH#580)
    - FTfunds.pm: Added useragent, cloned from BVB.pm (GH#577)


author: Remi Collet <remi@remirepo.net> - 2.3.0-1
changelog:
  - update to 2.3.0
  - raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 2.4.0-1
changelog:
  - update to 2.4.0
  - raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
  - run upstream test suite without server


author: Remi Collet <remi@remirepo.net> - 2.3.2-1
changelog:
  - update to 2.3.2
  - add pie virtual provides
  - drop pear/pecl dependency
  - sources from github
  - re-license spec file to CECILL-2.1


author: Jerry James <loganjerry@gmail.com> - 2.1.1-1
changelog:
  - Version 2.1.1
  - Add patch to fix build with prompt-toolkit 3.0.52
  - Add patch to fix build when CtrlH != Backspace
  - Tell %pyproject_save_files that license files are installed
  - Remove unnecessary bootstrap mode
  - Remove unnecessary SETUPTOOLS_SCM_PRETEND_VERSION settings


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main python package
  - New subpackages: root-graf3d-glad, root-net-curl,
    root-tmva-sofie-parser-python, root-tree-ml, root-histv7util
  - Dropped patches: 2
  - New patches: 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-5
changelog:
  - Use the system civetweb library since it now supports web sockets
  - Drop the davix module for Fedora 45+ (davix will soon be retired)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.04-1
changelog:
  - Update to 6.40.04
  - The root-roofit-jsoninterface package was merged with root-roofit-hs3
  - Fix calculation of kerning distances in generated PDF files
  - Dropped patches: 1
  - New patches: 2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


