# changelog

author: Kamil Dudka <kdudka@redhat.com> - 7.74.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2020-8286 - curl: Inferior OCSP verification
      CVE-2020-8285 - libcurl: FTP wildcard stack overflow
      CVE-2020-8284 - curl: trusting FTP PASV responses


author: Kamil Dudka <kdudka@redhat.com> - 7.76.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2021-22890 - TLS 1.3 session ticket proxy host mixup
      CVE-2021-22876 - Automatic referer leaks credentials


author: Andreas Schneider <asn@redhat.com> - 0.9.2-1
changelog:
  - Upate to version 0.9.2
  - resolves #1769370 - Remove the docs, they can be found on https://api.libssh.org/


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config
  - Added patch to re-enable algorithms using sha1 in sshd for testing
  - resolves: #1822529 - CVE-2020-1730


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-3
changelog:
  - Do not return error when server properly closed the channel (#1849069)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Felix Kaechele <heffer@fedoraproject.org> - 1:1.18.0-1
changelog:
  - Update to 1.18.0
  - Increased types_hash_max_size to 4096 in default config
  - Add gpg source verification
  - Add Recommends: logrotate
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Zuzana Svetlikova <zsvetlik@redhat.com - 1:14.16.0-3
changelog:
  - Only require nodejs-packaging on Fedora
  - remove --debug-nghttp2 (#1930775)
  - always build with systemtap


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-4 + 0.10.3-10
changelog:
  - Remove openssh-ldap subpackage (#1871025)
  - pkcs11: Do not crash with invalid paths in ssh-agent (#1868996)
  - Clarify documentation about sftp-server -m (#1862504)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-3 + 0.10.4-1
changelog:
  - Unbreak seccomp filter on arm (#1897712)
  - Add a workaround for Debian's broken OpenSSH (#1881301)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-4 + 0.10.4-1
changelog:
  - Remove "PasswordAuthentication yes" from vendor configuration as it is
    already default and it might be hard to override.
  - Fix broken obsoletes for openssh-ldap (#1902084)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-5 + 0.10.4-1
changelog:
  - Use /usr/share/empty.sshd instead of /var/empty/sshd
  - Allow emptu labels in PKCS#11 tokens (#1919007)
  - Drop openssh-cavs subpackage


author: Tomáš Mráz <tmraz@redhat.com> 3.0.0-0.alpha6.1
changelog:
  - Initial 3.0.0 rebase package with 3.0.0 alpha 6
  - All old FIPS changes are dropped
  - Patches based on https://github.com/t8m/openssl/tree/fedora-package


author: Tomáš Mráz <tmraz@redhat.com> 3.0.0-0.alpha8.2
changelog:
  - Enable KTLS support (it is broken though so expect various
    things to break if 'modprobe tls' is used)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-3
changelog:
  - Added support for "pin-source" within PKCS#11 URI (#1670026)
  - Search objects in all matching tokens (#1760751)
  - Set flag RSA_FLAG_EXT_PKEY for RSA keys (#1760541)
  - Fixed various bugs


author: Daiki Ueno <dueno@redhat.com> - 0.23.19-1
changelog:
  - Update to upstream 0.23.19 release
  - Check archive signature in %prep
  - Switch to using Meson as the build system


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-465
changelog:
  - Fix sv_collxfrm macro to respect locale
  - Fix an iterator signedness in handling an mro exception (GH#18155)
  - Fix a code flow in Perl_sv_inc_nomg()
  - Disable a dual-lived perl-Tie-RefHash subpackage (bug #1887937)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-466
changelog:
  - Fix un undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.1-469
changelog:
  - 5.32.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.32.1/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


