# changelog

author: Petr Pisar <ppisar@redhat.com> - 2.0.10-13
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1623267)


author: Raven <raven@sysadmins.ws> - 1.22.0-2
changelog:
  - rebuild with pcre instead of pcre2 as an ugly fix for this
    https://github.com/openresty/lua-nginx-module/issues/1984


author: Raven <raven@sysadmins.ws> - 1.24.0-1
changelog:
  - new stable version
  - upgrade lua-nginx-module to 0.10.24
  - upgrade headers-more-nginx-module version to 0.34


author: Remi Collet <remi@remirepo.net> - 7.2.34-6
changelog:
  - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - Fix #76448 Stack buffer overflow in firebird_info_cb
  - Fix #76449 SIGSEGV in firebird_handle_doer
  - Fix #76450 SIGSEGV in firebird_stmt_execute
  - Fix #76452 Crash while parsing blob data in firebird_fetch_blob
    CVE-2021-21704


author: Remi Collet <remi@remirepo.net> - 7.2.34-9
changelog:
  - fix PHP-FPM oob R/W in root process leading to priv escalation
    CVE-2021-21703
  - use libicu version 69
  - use oracle client library version 21.3


author: Remi Collet <remi@remirepo.net> - 7.2.34-11
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625


author: Remi Collet <remi@remirepo.net> - 7.2.34-13
changelog:
  - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
  - core: fix #81727 Don't mangle HTTP variable names that clash with ones
    that have a specific semantic meaning. CVE-2022-31629
  - use oracle client library version 21.7


author: Remi Collet <remi@remirepo.net> - 7.2.34-15
changelog:
  - pdo: fix #81740: PDO::quote() may return unquoted string
    CVE-2022-31631
  - use oracle client library version 21.8


author: Remi Collet <remi@remirepo.net> - 7.2.34-16
changelog:
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662


author: Remi Collet <remi@remirepo.net> - 1:1.10.10-3
changelog:
  - update Archive_Tar to 1.4.9
  - add patch for XML_Util and PHP 7.4 from
    https://github.com/pear/XML_Util/pull/11


author: Remi Collet <remi@remirepo.net> - 5.6.40-37
changelog:
  - Fix insufficient random bytes in HTTP Digest authentication for SOAP
    GHSA-76gg-c692-v2mw
  - use oracle client library version 21.10


author: Remi Collet <remi@remirepo.net> - 1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 3.4.4-18
changelog:
  - add patches for PHP 8.1 from upstream and from
    https://github.com/Imagick/imagick/pull/413
  - run tests in parallel (7.4+)


author: Remi Collet <remi@remirepo.net> - 3.5.0~RC1-1
changelog:
  - update to 3.5.0RC1
  - drop all patches, all merged upstream
  - add patch to fix some methods reflection from
    https://github.com/Imagick/imagick/pull/421


author: Remi Collet <remi@remirepo.net> - 3.5.0~RC2-1
changelog:
  - update to 3.5.0RC2
  - rename to php-pecl-imagick-im6 or php-pecl-imagick-im7
  - drop all patches, all merged upstream including
    https://github.com/Imagick/imagick/pull/428 add stubs in package
    https://github.com/Imagick/imagick/pull/426 typo in type name
    https://github.com/Imagick/imagick/pull/425 fix pass by ref usage


author: Remi Collet <remi@remirepo.net> - 3.5.0-1
changelog:
  - update to 3.5.0
  - open https://github.com/Imagick/imagick/pull/434 type issue related to HDRI
  - open https://github.com/Imagick/imagick/pull/435 improve regen_arginfo
  - open https://github.com/Imagick/imagick/pull/436 cleanup working directory


author: Remi Collet <remi@remirepo.net> - 3.5.1~RC1-1
changelog:
  - update to 3.5.1RC1
  - add patch for PHP 8.1.0beta1 from
    https://github.com/Imagick/imagick/pull/450


author: Remi Collet <remi@remirepo.net> - 3.5.1-3
changelog:
  - fix #457 failed test with ImageMagick 6.9.12-23 and 7.1.0-8
    using patch from https://github.com/Imagick/imagick/pull/458


author: Remi Collet <remi@remirepo.net> - 7.0.33-38
changelog:
  - Fix Missing error check and insufficient random bytes in HTTP Digest
    authentication for SOAP
    GHSA-76gg-c692-v2mw
  - use oracle client library version 21.10


author: Remi Collet <remi@remirepo.net> - 5.1.22-2
changelog:
  - build out of sources tree
  - add upstream patch for 8.3
  - add patch for tests when build out of sources tree from
    https://github.com/krakjoe/apcu/pull/490


author: Remi Collet <remi@remirepo.net> - 7.3.33-3
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625
  - pcre: fix default options for pcre >= 10.38


author: Remi Collet <remi@remirepo.net> - 7.3.33-8
changelog:
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662
  - add dependency on pcre2 minimal version


author: Ondrej Sloup <osloup@redhat.com> - 4.3.1-1
changelog:
  - Fix mixed spaces and tabs
  - Remove config files as they were unified
  - Fix chronology of changelog made by Mass_Rebuild
  - Add pgpool_recovery 1.4 and 1.3-1.4
  - Rebase to the latest upstream version (rhbz#1870431)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Steve Traylen <steve.traylen@cern.ch> - 4.10.0-3
changelog:
  - New bcond flag to disable/enable soupsieve dependency
  - New bcond flag to disable/enable testing
  - Test module loading in check section


author: Scott K Logan <logans@cottsay.net> - 3.0.12-2
changelog:
  - Add explicit conflict between unlike python2/3 subpackages (rhbz#1708871)
  - Make the -doc subpackage dependency weaker


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-4
changelog:
  - Skip tests that are buggy on certain architectures
  - Restore the UUID tests, as the bug was fixed some time ago


author: Miro Hrončok <mhroncok@redhat.com> - 1:1.1-8
changelog:
  - Use standard library unittest.mock instead of 3rd party mock
  - Add subpackages with Python extras: lxml genshi chardet all


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 5.41.3-1
changelog:
  - Update to 5.41.3
  - Use py3_dist macro
  - Disable Redis tests (missing dependency)
  - Enable lark-parser tests


author: Miro Hrončok <mhroncok@redhat.com> - 6.6.0-1
changelog:
  - Update to 6.6.0
  - Add subpackages with extras
  - Fix python-bytecode-inconsistent-mtime of learned_dfas.py
  - Fixes: rhbz#1902400


author: Tomas Orsava <torsava@redhat.com> - 1.1.1-2
changelog:
  - Convert from Fedora to the python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Remove dependency on setuptools_scm
  - Resolves: rhbz#1877430


author: Karolina Surma <ksurma@redhat.com> - 3.0.1-3
changelog:
  - Don't explicitly declare runtime dependencies when building for Python 3
  - Declare jinja2+i18n extra to map the upstream package structure


author: Miro Hrončok <mhroncok@redhat.com> - 4.7.1-6
changelog:
  - Use SPDX license identifiers
  - The schematron files are not Zlib licensed, but MIT
  - Package the lxml[cssselect], lxml[html5] and lxml[htmlsoup] extras


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Lumír Balhar <lbalhar@redhat.com> - 20.2.4-4
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Karolina Surma <ksurma@redhat.com> - 1.11.0-3
changelog:
  - Remove documentation from the package
  - Remove testing that requires very old pytest, use %py3_check_import instead


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.11.1-6
changelog:
  - Drop obsolete macros
  - Update description and summary from upstream
  - Use “forge” macros to reference source
  - Use pyproject-rpm-macros


author: Adam Williamson <awilliam@redhat.com> - 2.27.0-1
changelog:
  - Update to 2.27.0
  - Re-enable test_https_warnings as it works with pytest-httpbin 1.0.0 now
  - Re-enable test_pyopenssl_redirect, it seems to work too


author: Karolina Surma <ksurma@redhat.com> - 1:5.1.1-1
changelog:
  - Update to 5.1.1
  - Fixes rhbz#2110473
  - Remove reST documentation from the -doc package, ship only HTML


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Petr Viktorin <pviktori@redhat.com> - 2.0.1-1
changelog:
  - Version 2.0.1
    - Removed support for text file objects as load input
    - First argument of load and loads can no longer be passed by keyword
    - Raise an error when dotted keys define values outside the "current table"
    - Prepare for inclusion in stdlib


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.0.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2022-23959 aka VSV00008, rhbz#2045033


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.2.0-1
changelog:
  - New upstream release. The regular bi-annual "fresh" release
  - Removed list of patches from comments
  - Cosmetical changes to specfile from upstream
  - Now build with --with-contrib


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-1
changelog:
  - New upstream release
  - Added a bcond system_allocator for skipping jemalloc, bz#1917697
  - nil _lto_cflags macro to link to jemalloc again
  - disable pcre2-jit on 32bit x86 for now


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-2
changelog:
  - Switched from bcond to bcond_with for compatibility with el8 and el9
  - haproxy builddep on systems with haproxy2
  - Disable pcre2-jit only for fedora <= 37 on 32bit x86


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.20.0-1
changelog:
  - Built for varnish-7.1.0
  - Now provides vmod(name) instead of vmod-name, matching varnish' provides


