- Update to cmake-3.14.6 (rhbz#1746146, rhbz#1746104) - Do not use system jsoncpp - Split off appdata file as external source file - Fix rename patches - Bugfix release 3.14.7 - Release 3.17.1 - Drop EPEL6 support - Add openssl BR - Fix rhbz#1811358 - Use system zstd - Fix macros for bundled libraries - Add Provides for bundled libraries - Release 3.17.2 - Release 3.17.3 - Change command to add Python shebang of the cmake3.prov file (epel bz#1845614) - Backport support for out-of-source builds controlled by __cmake3_in_source_build macro - Backport cmake3_build and cmake3_install macros - Backport ctest3 macro - Release 3.17.5 - Update to cmake-3.14.6 (rhbz#1746146, rhbz#1746104) - Do not use system jsoncpp - Split off appdata file as external source file - Fix rename patches - Bugfix release 3.14.7 - Release 3.17.1 - Drop EPEL6 support - Add openssl BR - Fix rhbz#1811358 - Use system zstd - Fix macros for bundled libraries - Add Provides for bundled libraries - Release 3.17.2 - Release 3.17.3 - Change command to add Python shebang of the cmake3.prov file (epel bz#1845614) - Backport support for out-of-source builds controlled by __cmake3_in_source_build macro - Backport cmake3_build and cmake3_install macros - Backport ctest3 macro - Release 3.17.5 - Update to 15.2 - Modernise %patch usage, which has been deprecated in Fedora 38 - Update to 15.3 - Update to 15.4 - Remove RHEL 6 bits - Update to 16.0 - Update to 16.1 - Update to 16.2 - Enable debug package - Update to 16.3 - idna: fix OOB read in punycode decoder - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 1.42.0 - Drop use of rpmautospec for the release field - Update to 1.43.0 - Also remove udp_multicast_join6 test - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 1.44.0 - Update to 1.44.1 to address regression - Update to libuv 1.44.2 - Latest upstream - Latest upstream - Latest upstream - Latest upstream - Disable amd64 assembly on non-intel architectures (#2035802): this should avoid the issue where an executable stack is created. - Avoid executable stack on i686 also. - Use correct prefix for pkgconfig. - Latest upstream - Latest upstream - Latest upstream - backport from 1.1.1g-11: Further changes for SP 800-56A rev3 requirements - backport from 1.1.1g-9: Rewire FIPS_drbg API to use the RAND_DRBG - backport from 1.1.1g-9: Use the well known DH groups in TLS even for 2048 and 1024 bit parameters - backport from 1.1.1g-7: Disallow dropping Extended Master Secret extension on renegotiation - backport from 1.1.1g-7: Return alert from s_server if ALPN protocol does not match - backport from 1.1.1g-7: SHA1 is allowed in @SECLEVEL=2 only if allowed by TLS SigAlgs configuration - backport from 1.1.1g-6: Add FIPS selftest for PBKDF2 and KBKDF - backport from 1.1.1g-5: Allow only well known DH groups in the FIPS mode - backport from 1.1.1g-1: update to the 1.1.1g release - backport from 1.1.1g-1: FIPS module installed state definition is modified - backport from 1.1.1g-12: Fix CVE-2020-1971 ediparty null pointer dereference - backport from 1.1.1g-11.1: Implemented new FIPS requirements in regards to KDF and DH selftests - backport from 1.1.1g-11.1: Disallow certificates with explicit EC parameters - backport from 1.1.1g-15: version bump - backport from 1.1.1g-14: CVE-2021-3450 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT - backport from 1.1.1g-13: Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing - backport from 1.1.1k-4: Fixes bugs in s390x AES code - backport from 1.1.1k-4: Uses the first detected address family if IPv6 is not available - backport from 1.1.1k-4: Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. Resolves: rhbz#197821, related: rhbz#1934534 - backport from 1.1.1k-3: Cleansup the peer point formats on renegotiation. Resolves rhbz#1965362 - backport from 1.1.1k-2: Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085 - backport from 1.1.1k-2: Using safe primes for FIPS DH self-test - backport from 1.1.1k-1: Update to version 1.1.1k - backport from 1.1.1g-16: Use AI_ADDRCONFIG only when explicit host name is given - backport from 1.1.1g-16: Allow only curves defined in RFC 8446 in TLS 1.3 - backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Resolves: rhbz#2005402 - backport from 1.1.1k-6: CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Resolves: rhbz#2067146 - backport from 1.1.1k-7: CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - backport from 1.1.1k-7: Update expired certificates used in the testsuite Resolves: rhbz#2092462 - backport from 1.1.1k-7: CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - backport from 1.1.1k-7: CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - backport from 1.1.1k-9: Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - backport from 1.1.1k-9: Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - backport from 1.1.1k-9: Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - backport from 1.1.1k-9: Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - backport from 1.1.1k-8: Fix no-ec build Resolves: rhbz#2071020 - backport from 1.1.1k-11: Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - backport from 1.1.1k-10: Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - backport from 1.1.1k-10: Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - backport from 1.1.1k-12: Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659). Resolves: RHEL-17696 - backport from 1.1.1g-11: Further changes for SP 800-56A rev3 requirements - backport from 1.1.1g-9: Rewire FIPS_drbg API to use the RAND_DRBG - backport from 1.1.1g-9: Use the well known DH groups in TLS even for 2048 and 1024 bit parameters - backport from 1.1.1g-7: Disallow dropping Extended Master Secret extension on renegotiation - backport from 1.1.1g-7: Return alert from s_server if ALPN protocol does not match - backport from 1.1.1g-7: SHA1 is allowed in @SECLEVEL=2 only if allowed by TLS SigAlgs configuration - backport from 1.1.1g-6: Add FIPS selftest for PBKDF2 and KBKDF - backport from 1.1.1g-5: Allow only well known DH groups in the FIPS mode - backport from 1.1.1g-1: update to the 1.1.1g release - backport from 1.1.1g-1: FIPS module installed state definition is modified - backport from 1.1.1g-12: Fix CVE-2020-1971 ediparty null pointer dereference - backport from 1.1.1g-11.1: Implemented new FIPS requirements in regards to KDF and DH selftests - backport from 1.1.1g-11.1: Disallow certificates with explicit EC parameters - backport from 1.1.1g-15: version bump - backport from 1.1.1g-14: CVE-2021-3450 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT - backport from 1.1.1g-13: Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing - backport from 1.1.1k-4: Fixes bugs in s390x AES code - backport from 1.1.1k-4: Uses the first detected address family if IPv6 is not available - backport from 1.1.1k-4: Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. Resolves: rhbz#197821, related: rhbz#1934534 - backport from 1.1.1k-3: Cleansup the peer point formats on renegotiation. Resolves rhbz#1965362 - backport from 1.1.1k-2: Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085 - backport from 1.1.1k-2: Using safe primes for FIPS DH self-test - backport from 1.1.1k-1: Update to version 1.1.1k - backport from 1.1.1g-16: Use AI_ADDRCONFIG only when explicit host name is given - backport from 1.1.1g-16: Allow only curves defined in RFC 8446 in TLS 1.3 - backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Resolves: rhbz#2005402 - backport from 1.1.1k-6: CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Resolves: rhbz#2067146 - backport from 1.1.1k-7: CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - backport from 1.1.1k-7: Update expired certificates used in the testsuite Resolves: rhbz#2092462 - backport from 1.1.1k-7: CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - backport from 1.1.1k-7: CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - backport from 1.1.1k-9: Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - backport from 1.1.1k-9: Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - backport from 1.1.1k-9: Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - backport from 1.1.1k-9: Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - backport from 1.1.1k-8: Fix no-ec build Resolves: rhbz#2071020 - backport from 1.1.1k-11: Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - backport from 1.1.1k-10: Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - backport from 1.1.1k-10: Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - backport from 1.1.1k-12: Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659). Resolves: RHEL-17696 - Initial packaging for PostgreSQL RPM repository, to satisfy patroni dependency. - Rebuild for PostgreSQL 12 - Rebuilt - Require versionless -libs subpackage. Fixes https://redmine.postgresql.org/issues/4798 https://redmine.postgresql.org/issues/4799 - Add PY3 support to RHEL 7 package - Get rid of -debug subpackage - Make PY3 package the default one, so that we can build this package easier on Fedora 31+ (and RHEL 9+) - Remove SLES bits - Fix SLES 12 builds. Patch from Talha Bin Rizwan. - Update to 2.8.5 - Let python2-psycopg2 provide python-psycopg2. Per https://redmine.postgresql.org/issues/5491 - Depend on "libpq5", which is now provided by the latest PostgreSQL 10+ minor update set. - Use the path provided by the "common" makefile. This package now goes to common directory. - Update to 2.8.6 - Initial packaging for the PostgreSQL RPM repository to satisfy Patroni dependency. Took the spec file from Fedora rawhide. - Initial EPEL7 package - Clean up spec, mention python version - Add Python 3.6 sub-package to EPEL7 - Rebuilt to change main python from 3.4 to 3.6 - Update to 3.12 (bugz#1699744) - Update to 3.13 - Drop python34 - Make click own its folder - Use pythonX_version macros from devel package - Update to 2.0 - Change spec for epel7 - Update to 2.2 - Update to 3.3 - Update to 6.3 - Add EPEL compatibility - Fixup EPEL packaging - Adopt to packaging guidelines - Add python3_other subpackage - Backport upstream commit for newer pytest compatibility - Rebuilt to change main python from 3.4 to 3.6 - Reverting to 1.5 pre user feedback and upstream. - Change to new upstream, update to 2.4 (#1126521) - Build documentation. - Add python3 subpackage. - Conflict with python-vobject <= 0.8.1c-10 (workaround until #1183377 is fixed one way or another). - Add patch for string handling in dateutil.tz.tzstr (#1197791) - Update to latest upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Support python34 on epel7. - Support python36 on epel7. - Rebuilt to change main python from 3.4 to 3.6 - Rebuild to provide python<version>dist(argcomplete). - Initial EPEL package - add python3_other subpackage - use pypi macros - Update to 2.7 - Rebuilt to change main python from 3.4 to 3.6 - Update to 2.10 (bz#1902186) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Python 2 binary package renamed to python2-prettytable See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for Python 3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Change source RPM package name to python3-prettytable for EPEL (#1716231) - Remove shebang from prettytable.py (#1716231 #c1) - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - epel doesn't have python3 - Update to 1.2.1 - Update to 2.2.1 for https://bugzilla.redhat.com/1288221 - Update names of %doc files. - Build a package for Python34 - Use proper Python3 macros - Build for python36 - Rebuilt to change main python from 3.4 to 3.6 - Clean up spec and source/upstream. - Update to 5.6.7. Fixes CVE-2019-18874 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Latest upstream - Add setuptools dependency - Update to 1.6.8. Fixes bug #1528490 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for Python 3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - add python3_other subpackage for epel7 - prepare removal of python2 subpackage in Fedora - use pypi macros - try to enable tests provided actually from tarball - Rebuilt to change main python from 3.4 to 3.6 - Obsolete/Provide python-SocksiPy in epel7. Fixes bug #1648422 - Initial EPEL7 package - Add python3_other subpackage - Update to 1.11.0 - Rebuilt to change main python from 3.4 to 3.6 - Enable python3_other tests, resolve egg-info issue (bug #1688502) - Update to 1.12.0 - Update to 1.14.0 (bugz#1821211) - Re-enable python34 again (bz#1830898) - Add provides for python3-six - Initial EPEL7 package - Update to 1.19.1 - Patch to use system six - Do not attempt change ssl handling - Install symlink to system six.py - add python3_other subpackage - add BR: python3X-setuptools - use pypi macros - Rebuilt to change main python from 3.4 to 3.6 - Update to 1.25.1, fixes CVE (bz#1702475) - Update to 1.25.6 (bz#1787227) - Rebase upstream fix for CVE-2020-26137 (bz#1883870) - Initial Fedora package - Add %check section