Maintainer Paul Wolneykien in the sisyphus_riscv64 branch: Information

- Note, that v0.3.0-alt1 fixes missing checksum data for *.ko.zst files
  by including *.ko.zst by default (Fixes: OVE-20251204-0001).
- Added a note about CWE-489 fixed in 5.3.0.
- e2k build fix (cpio archive too big)
- Rebuild to reflect fixes since the broken version v1.5-alt2.1
  (Fixes: OVE-20251121-0001).
- Notify the users about new security updates (Fixes: OVE-20251117-0001).
- Display EOL.txt on validate if it exists.
- New version 1.24.3.
- Compile and provide utf8_range as a part of libprotobuf.so and
  libprotobuf-lite.so.
- Fix: Add runtime dependency on libqt6-quickparticles (closes: 49690, 50671).
- New version 0.3.0.
- Disable --enable-trust-c-tco for e2k (breaks gsc).
- Fixed library symlinks.
- Fixed library symlinks.
- Fixed library symlinks.
- Build without RPATH.
- New version 2.12.5.
- Fixed --fpm-socket-path setup CLI flag (thx Jan Schuppik).
- Fix: Make /etc/icingaweb2/setup.token be owned by 'icingaweb2' group.
- New version 0.13.1.
- New version 0.17.0.
- Fix: Filter out task repositories by default.
- Updated the manual page.
- Remove old (probably, wrong) openssl.cnf "HOME" fix.
- Add GOST provider options to the control script.
- Install all built files (including the provider).
- Updated the README file.
- Write integrity-applier messages to log file in --auto mode.
- Don't require ima_appraise=fix in order to sign files.
- Read and write the command-line options from/to state dir in --auto mode.
- Directly use the main config instead of evm_mode file when applying
  and checking EVM.
- Use independent openssl.cnf for certificate generation.
- Fix: Document the GOST_PARAMSET configuration option.
- Fix: Don't insert GOST kernel modules whin signing the files.
- integrity-sign: Improve the check for incompatible options.
- Added -B | --basename command-line option.
- Add command-line and configuration options to control overwrite
  of existing signatures.
- Fix: Check access to the private key when signing the files.
- integrity-sign: Don't write messages to log file by default.
- Don't generate a new certificate without -U | --update option.
- Update the main manual page (trusted keyring + configuration
  options).
- Added integrity-sign(8) manual page.
- Don't load any keys into userspace when signing the files.
- Added -U | --update option.
- Better messaging on verification mode: N/A (reason), BAD, OK.
- Improved --verify mode: Search for keys loaded into the IMA keyring
- Make the initrd script not abort on key related errors by default.
- Introduce SECONDARY_SUFFIX option to load CA certs.
- Added CERT_BASENAME configuration option.
- Allow to sign files using only the private key.
- Optionally, protect the keys and keyrings.
- Use `keyctl id` to search for a keyring ID.
- Add IMA_KEYRING configuration option.
- Add support for --cert and --key options.
- Initialize kmk-user in EVM mode only.
- Fix: Specify that v0.7.5-alt1 closes 48556.
- Fix: Use standalone OpenSSL configuration.
- Write /tmp/integrity.log at initrd stage for debug purposes.
- Hide the first two social icons on the about page.
- Hide the first two social icons on the login page.
- Added icinga-logo-big.png and favicon.png (closes: 50792).
- New version 1.11.5 (fixes: CVE-2024-24820, CVE-2025-23203).
- New version 0.22.0.
- New version 2.14.6 (fixes: CVE-2025-48057, CVE-2024-49369).
- Initial build for Sisyphus.
- Added "kde-smartcard" to the list of screen savers.
- Fixed some spelling errors.
- Added Georgian translation (thx Ekaterine Papava).
- NMU: Switch to C++17 for new Protobuf and Abseil.
- NMU: Switch to C++17 for new Protobuf and Abseil.
- NMU: Build with external libabseil-cpp.
- E2K: no shellcheck so far (ghc missing)
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fixed build (drop rpm-macros-fillup).
- Fix: Added module configuration for "opensc".
- Initial version.
- Add support for task subnums.
- Add the script to update a local RPM repo from hasher builds.
- Checkout the specified master branch in the dry run mode.
- Porting on python3.
- Initial build for ALT Linux.
- Specify the package version and other metadata.
- Comment-out install_requires as it is known not to work with
  some version of pluggy.
- Fixed build: Pass unitdir to make.
- Package base names in exclude.list (was --- regexp).
- Added 'bind', 'libaom', 'vlc' and 'bind-dyndb-ldap' to the list of
  packages that shouldn't be cleaned.
- export-repo: Do not follow the symbolic links.
- Fixed 'clean-stage4-unused-*' targets.
- Specify the digest for base Docker images
  (alt@sha256:c4eb4ad40440b7c3297c14c91048aa07cbe2534f9e629f4bc9b0d113ca57821f).
- Added 'wpa_supplicant' to exclude.list and install the list
  to pkgdatadir.
- Support regular expressions in exclude.list.
- Pass the time-stamp to the pre and post scripts.
- Introduce file checksumming and checksum verification.
- Fixed copying srpm-cleanup-common to the node directory.
- Fixed building the containers with srpm-cleanup-common.
- Fix: Rebuild the original SRPMs for packages that have failed on
  Stage IV on any arch.
- Fix/improve the 'check-disttags' target.
- Fix: Include 'noinode' into stage III and IV retry categories.
- Initial release for ALT Linux.
- Fixed divide by zero in "Predict problems" (closes: 44502).
- Fixed date/time functions for PostgreSQL (closes: 44501).
- Fixed build: Pass unitdir to make.
- Use icinga2apic Python module (patch).
- Package the README.
- Added "SETUP" section to the README.
- Improved CLI synopsis in README and manpage.
- Fixed error message in EventListener.
- Fixed EventListener: Add filter matching Host events.
- Fixed EventListener: Explicitly convert events to objects.

Maintainer Paul Wolneykien in the sisyphus_riscv64 branch: Information

Last changes