# changelog

author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.0-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

  Thu Oct 14 2021 Sagi Shnaidman <sshnaidm@redhat.com> - 1.3.0-2
  - Use ansible or ansible-core as BuildRequires


author: John Sullivan <jsullivan@nasuni.com> - 1.0.5-4
changelog:
  - Update EPEL 7 and 8 support for 1.0.5

    * Sat Mar 16 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-3
    - (#1679375) fixes syntax error in /etc/logrotate.d/clamd.exim

    * Tue Mar 05 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-2
    - set nullblog to fix post script (#2253914)
    - Properly check valgrind arches

    * Thu Feb 08 2024 Orion Poplawski <orion@nwra.com> - 1.0.5-1
    - Update to 1.0.5

    * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Sun Oct 29 2023 Orion Poplawski <orion@nwra.com> - 1.0.4-1
    - Update to 1.0.4
    - Remove docs again from main package (bz#2230512)

    * Fri Aug 18 2023 Orion Poplawski <orion@nwra.com> - 1.0.2-1
    - Update to 1.0.2 CVE-2023-20197 (bz#2232508)

    * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.1-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    * Mon Feb 27 2023 Orion Poplawski <orion@nwra.com> - 1.0.1-4
    - Mark cvd files is clamav-data as %config(noreplace) (bz#2170876)
    - Rename clamav-update to clamav-freshclam
    - Make clamav-freshclam supplement clamd
    - Have clamav-freshclam ghost all of the .cld and .cvd files
    - Update data files with help of Cisco-Talos/cvdupdate
    - Update to 1.0.1
    - Make sure RUSTFLAGS are passed to rustc (bz#2167194)
      - Fix multilib install


author: Stephane Thiell <sthiell@stanford.edu> 1.8.3-2
changelog:
  - Removed unversioned __python macros https://fedoraproject.org/wiki/Changes/PythonMacroError [1896129]


author: Till Hofmann <till.hofmann@posteo.de> - 0.10.0-32
changelog:
  - Backport fix for CVE-2025-54812 (HTMLLayout logger name not escaped,
    possible XSS in generated HTML log files)


author: Paul Howarth <paul@city-fan.org> - 1.17-28
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Remove bundled modules and depend on them instead
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.17-29
changelog:
  - Replace use of cryptographically-insecure rand() function (CVE-2026-8700);
    use Crypt::URandom instead, which has a backend that calls getrandom() on
    Linux
  - Avoid use of 2-argument open() (CVE-2026-8704)
  - Fix "Use of uninitialized value $cur_part in hash element" warning in
    Crypt::DSA::KeyChain
  - Add security note discouraging use of Crypt::DSA
  - Fix typo in Crypt::DSA::Util
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.17-31
changelog:
  - Hardening: Use a fresh, independent CSPRNG witness every round
  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
    with hundreds of signatures could lead to full private-key compromise;
    keys should be considered compromised and new keys should be generated


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Module::CPANTS::Kwalitee now uses Module::Find to find Kwalitee modules
      (instead of Module::Pluggable that unconditonally spits a deprecation
      warning); you usually don't need to care but if you have your custom
      Kwalitee plugin loader (such as Module::CPANTS::SiteKwalitee), you need to
      change it - sorry for the inconvenience
    - Allow dash and dot in script name in the NAME section for
      non-pm, non-pod files
    - Added has_meta_json metric (CPAN RT#107885)
    - Accept a few more README extensions
    - Accept two more Moose modules as strict equivalents
    - Various micro optimization for performance
    - Dropped a few dependencies
    - Various documentation updates
    - Not to check use_strict/use_warnings for Perl 6 modules in a Perl 5
      distribution
    - Worked around a File::Find::Object issue
    - Fixed dynamic_config handling
    - Improved LICENSE file detection (CPAN RT#114247)
    - Skip everything in MANIFEST.SKIP while testing symlinks (GH#33)
  - Simplify find command using -delete
  - Add file xt/kwalitee/mas_meta_json.t missing from dist, needed for
    xt/kwalitee.t (GH#38)


author: Peter Bieringer <pb@bieringer.de>
changelog:
  - Add missing requirement InfCloud-fontware to InfCloud
  - Extend SELinux policy for access to /run/systemd/userdb/io.systemd.DynamicUser on start


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


