# changelog

author: Tomas Orsava <torsava@redhat.com> - 2.7.8-17
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1709403 and rhbz#1709407


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Tomas Orsava <torsava@redhat.com> - 3.6.3-4
changelog:
  - Security fix for CVE-2019-9636
  - Increased the stack size to avoid segfault during tests
  Resolves: rhbz#1689322


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Remi Collet <remi@remirepo.net> - 1.4.0-1
changelog:
  - update to 1.4.0 with libbson and libmongoc 1.9.2
  - enable snappy and zlib compression
  - build with --enable-mongodb-crypto-system-profile option


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Honza Horak <hhorak@redhat.com> - 25.3.20-2
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1415720
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed


author: Honza Horak <hhorak@redhat.com> - 1:10.2.7-4
changelog:
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Do not use mysql-wait-stop on RHEL-7 service files


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-2
changelog:
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Run mysql-prepare-db-dir as non-root


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-3
changelog:
  - Handle left-over files that do not uninstall
    Resolves: #1487292
  - Fix uninstalled directories
    Resolves: #1487292
  - Files outside of /opt/rh should be in syspath package
    Resolves: #1492645
  - Split mariadb package to more sub-packages to match upstream's RPM list
    Resolves: #1490419


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-4
changelog:
  - Fix issues found by rpmdiff, particularly:
    unexpanded macro %{mysqld_pid_dir} -- left-over from switching pid file dir,
    we can remove in new SCL
    jar files included in connect engine
    Related: #1455850


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-5
changelog:
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.22-1
changelog:
  - Rebase to 10.2.22
    Resolves: #1510416
    Resolves: #1645934
  - Use downstream tmpfiles instead of the upstream one
  - Patch 2 upstreamed
  - Patch 8 obsolete - upstream started to use macros
  - Patch 40 upstreamed
  - Add patch for wsrep_recover_position function in mysqld_safe
    Resolves: #1694679
  - CVEs fixed: #1664048
    CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3156
    CVE-2018-3282 CVE-2018-3277 CVE-2018-3143 CVE-2018-3251 CVE-2018-3185
  - CVEs fixed: #1617946
    CVE-2018-3058 CVE-2018-3060 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066
  - CVEs fixed: #1572138
    CVE-2018-2755 CVE-2018-2759 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
    CVE-2018-2777 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786
    CVE-2018-2787 CVE-2018-2810 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819
    CVE-2018-3081
  - CVEs fixed: #1559064
    CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665
    CVE-2018-2668 CVE-2018-3133
  - CVEs fixed: #1558264
    CVE-2017-15365
  - CVEs fixed: #1558261
    CVE-2017-10268 CVE-2017-10378
  - CVEs fixed: #1640321
    CVE-2018-3174


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-0.1.GIT
changelog:
  - New upstream (pre-)release.
  - Add valgrind-3.14.0-add-vector-h.patch.
  - Add valgrind-3.14.0-disable-s390x-z13.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.
  - Add elfutils-0.173-index-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.
  - Add elfutils-0.174-no-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Stan Cox <scox@redhat.com> - 9.3.2-6
changelog:
  - rhbz1498558 Needs dyninst-devtoolset installed
  - rhbz1470149 Use separate debuginfo for dyninst-testsuite
  - rhbz1647471 so name clashes


author: Nick Clifton <nickc@redhat.com> 2.30-24
changelog:
  - When installing both ld.bfd and ld.gold, do not reset the current alternative if upgrading.  (#1592069)


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


