- 4.4.2 (Fixes: CVE-2022-28487, CVE-2022-27942, CVE-2022-27940, CVE-2022-37047, CVE-2022-37049,
     CVE-2022-27939, CVE-2022-25484, CVE-2022-27941)

- New version.
- Fixed multiple client side input validation issues
  (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319,
  CVE-2022-39320, CVE-2022-41877, CVE-2022-39347).

- exo-helper: Properly quote command parameters (fixes: CVE-2022-45062).

- Backports from 1.19.4:
  + fix integer overflows in PAC parsing (Fixes: CVE-2022-42898);
  + fix some memory leaks.

- 1.22.1 (Fixes: CVE-2022-41741, CVE-2022-41742)

- Fixes CVE-2022-2625

- 10.22 (Fixes CVE-2022-2625)

- 11.17 (Fixes CVE-2022-2625)

- 12.12 (Fixes CVE-2022-2625)

- Fix double free during gnutls_pkcs7_verify (fixes: CVE-2022-2509).

- New version (Closes: 42217)
- Security fixes:
  + CVE-2022-0547: possible authentication bypass if multiple
    authentication plugins tries to do deferred authentication
- Fix build with new python3-module-docutils

- 0.103.6
  + CVE-2022-20770
  + CVE-2022-20796
  + CVE-2022-20771
  + CVE-2022-20785
  + CVE-2022-20792

- 1.18.2 (fixed CVE-2022-1215)

- 2.4.53 (Fixes:  CVE-2022-23943, CVE-2022-22721,  CVE-2022-22720, CVE-2022-22719)

- 9.11.36 -> 9.11.37 (fixes: CVE-2021-25220).

- 3.6.2 (Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581)

- 247.11 (Fixes: CVE-2021-3997)
- set default net-naming-scheme=v245

- (Fixes: CVE-2021-4034)

- 1.4.5 Release (Fixes: CVE-2020-7988).

- Updated to 2.4.3 (with multiple security fixes).
- Fixes:
  + CVE-2021-45960 issues with left shift by >= 29 places in function storeAtts that
    can lead to realloc misbehavior;
  + CVE-2021-46143 Integer overflow on variable m_groupSize in function doProlog;
  + CVE-2022-22822 Integer overflows near memory allocation in function addBinding;
  + CVE-2022-22823 Integer overflows near memory allocation in function build_model;
  + CVE-2022-22824 Integer overflows near memory allocation in function defineAttribute;
  + CVE-2022-22825 Integer overflows near memory allocation in function lookup;
  + CVE-2022-22826 Integer overflows near memory allocation in function nextScaffoldPart;
  + CVE-2022-22827 Integer overflows near memory allocation in function storeAtts.

- new version 2.2.25
- Fixes for the following security vulnerabilities:
  + CVE-2021-44420: Potential bypass of an upstream access control based on URL paths

- 2.1.36 -> 2.1.37 (fixes bug in the fix for CVE-2021-43332).

- 9.6.24 (Fixes CVE-2021-23214, CVE-2021-23222)

- 7.3.32 (Fixes: CVE-2021-21703)

- 3.2.8 (fixes: CVE-2021-33582)

- new version
- security (fixes: CVE-2021-3634)

- 2021.8.22 (Fixes: CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289,
  CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251,
  CVE-2021-39252, CVE-2021-39253, CVE-2021-39254, CVE-2021-39255, CVE-2021-39256,
  CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
  CVE-2021-39262, CVE-2021-39263)

- Updated to 1.1.1l (fixes CVE-2021-3711, CVE-2021-3712).

- Updated to 2.3.16 (fixes CVE-2021-33515, CVE-2021-29157, CVE-2021-33515, CVE-2021-29157).
- Package watch file.

- 1.17.2 (Fixes: CVE-2021-3672)

- New version (1.15.15).
- Fixes:
  + CVE-2021-36221

- 10.4.20 (ALT #40403)
- Fixes for the following security vulnerabilities:
  + CVE-2021-27928
  + CVE-2021-2166
  + CVE-2021-2154

- Fix CVE-2021-32055.

- Backported patch from NM-1.32.2 (fixes: CVE-2020-13529):
  + dhcp/systemd: ignore FORCERENEW requests for DHCPV4 to workaround
    CVE-2020-13529.
- Upstream git snapshot (nm-1-18 branch).

- new version (1.3.0) with rpmgs script
- CVE-2020-9382, CVE-2020-35625

- new version 1.36.1 (with rpmrb script)
- (T280226, CVE-2021-35197): Prevent blocked users from purging pages

- Updated to 4.4.2-P1 (fixes: CVE-2021-25217).

- 2.14.2 (Fixes: CVE-2020-35498)

- Updated to 1.8.17 (fixes: CVE-2021-32563).

- avoid infinite-loop in avahi-daemon (closes: #39357) (fixes: CVE-2021-3468)

- 0.15.0 (Fixes: CVE-2020-14355)

- fixes: CVE-2021-3472

- Dropped obsoleted patch.
- Updated to 2.83 (fixes: CVE-2021-3448).

- 3.4.5 (fixes: CVE-2020-1946)
- remove dkim patch (fixed by upstream).

- Backport version 5.4.x to p9 branch (fixes CVE-2020-1747).

- Applied security fixes (fixes: CVE-2020-17507) (thanks zerg@alt)
- Fixed build with gcc-10+.
- Disabled -reduce-relocation option since it causes issues with new binutils.

- P2P: Fix a corner case in peer addition based on PD Request
  (Fixes: CVE-2021-27803)

- applied patches from upstream git to fix security issue (Fixes: CVE-2020-5208)
  see https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
- added upstream fix FTBFS with gcc-10

- Autobuild version bump to 366
- CVE-2021-27135 (Closes: #39725)

- New version.
- Fixes:
  + CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn

- Version bump
- Many bugfixes, including security, including, but not limited to:
  Fixes: CVE-2020-25725, CVE-2020-35376

- Fixes:
  + CVE-2017-12847 Kill arbitrary processes by leveraging access to PID file.
- Don't install the PID file.

- 0.3.15 released
- Corrected mutliple security issues in tcsd
  (Fixes: CVE-2020-24332, CVE-2020-24330, CVE-2020-24331)

- Applied security fix from upstream (Fixes CVE-2018-18584).

- new version 0.21.0 (Fixes CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653).

- Applied security fix from upstream (Fixes: CVE-2020-29074).

- Backported upstream commits (fixes CVE-2020-9366).

- added upstream commit:
  + fixed a incorrect overflow check that could be optimized away
    (fixes CVE-2020-0452)

- Applied security patches from Debian and Gentoo (Fixes: CVE-2014-0466, CVE-2015-8107).

- Updated to upstream version 0.32.3 (Fixes: CVE-2017-5208,
  CVE-2017-5331, CVE-2017-5332, CVE-2017-5333).

- Applied security patch from Gentoo (Fixes: CVE-2017-9430).

- Updated to upstream version 1.2.1 (Fixes: CVE-2018-16741, CVE-2018-16742,
  CVE-2018-16743, CVE-2018-16744, CVE-2018-16745, CVE-2019-1010189, CVE-2019-1010190).

- Updated to upstream version 1.6.9 (Fixes: CVE-2019-11778, CVE-2019-11779).

- Applied security fix from upstream (Fixes: CVE-2019-14495).

- Updated to upstream version 1.18.0 (Fixes: CVE-2017-5991, CVE-2018-10289,
  CVE-2018-16647, CVE-2018-16648, CVE-2019-14975, CVE-2020-26519).

- Updated to 1.0.2u (fixes CVE-2019-1547, CVE-2019-1551, CVE-2019-1552,
  CVE-2019-1563)
- Backported upstream fix for GENERAL_NAME_cmp (fixes CVE-2020-1971).

- Updated to upstream version 1.2.2 (Fixes: CVE-2019-13045, CVE-2019-15717).

- Applied security fix from upstream (Fixes: CVE-2019-17362).

- Applied security patch from Fedora (Fixes: CVE-2019-19917, CVE-2019-19918)

- Updated to upstream version 0.19 (Fixes: CVE-2016-9601, CVE-2020-12268).

- Updated to upstream version 6.11 (Fixes: CVE-2020-14342).

- ^ 2.5.5 -> 2.5.9
- Fixes:
  + CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
    (closes #39292)
  + CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
  + CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and
    File.fnmatch?
  + CVE-2019-16201: Regular Expression Denial of Service vulnerability of
    WEBrick's Digest access authentication

- p9 build
- 5.28.3
- fixes CVE-2020-10543,CVE-2020-10878,CVE-2020-12723

- 1.2.3
- securuty fixes: CVE-2016-7951, CVE-2016-7952

- 0.9.10
- securuty fixes: CVE-2016-7949, CVE-2016-7950

- Backported to p9 (fixes CVE-2019-11068, CVE-2019-13117 and CVE-2019-13118).

- Build with bzip2 compression method support
- Massive apply security patches from Fedora and openSUSE
- Fixes:
  + CVE-2014-8139 CRC32 verification heap-based buffer overread
  + CVE-2014-8140 out-of-bounds write issue in test_compr_eb()
  + CVE-2014-8141 getZip64Data() out-of-bounds read issues
  + CVE-2014-9913 buffer overflow in zipinfo
  + CVE-2014-9636 out-of-bounds read or write and crash
  + CVE-2015-7696 fix for heap overflow
  + CVE-2015-7697 fix infinite loop when extracting empty bzip2 data
  + CVE-2016-9844 buffer overflow in zipinfo in similar way like fix for CVE-2014-9913
  + CVE-2018-1000035 heap based buffer overflow when opening password protected files
  + CVE-2018-18384 buffer overflow, when a ZIP archive specially crafted

- Updated to upstream version 0.15.0 (Fixes: CVE-2020-26682).

- Updated to upstream version 6.13.0 (Fixes: CVE-2020-7943).

- Cleaned up sources by importing sources from Debian.
- Forced using system build flags.
- Updated fix for CVE-2015-2063.

- Applied patches from Debian (Fixes: CVE-2013-4420).

- Applied patches from Debian (Fixes: CVE-2014-8123).

- Fixed CVE-2020-15999.

- Applied upstream patch (ALT#39135) (fixes CVE-2019-1010180).

- Applied patches from Gentoo (Fixes: CVE-2019-14247).

- Updated to upstream version 1.4.2 (Fixes: CVE-2020-24361).

- 4.13 (Fixes: CVE-2020-15811, CVE-2020-15810, CVE-2020-24606)

- AP: Silently ignore management frame from unexpected source address
  (Fixes: CVE-2019-16275) (Closes: 39131)

- Applied patches from Debian (Fixes: CVE-2005-3178).

- Applied security fixes from Gentoo (Fixes: CVE-2010-2642, CVE-2011-0433,
  CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554, CVE-2011-5244).

- Updated to snapshot from upstream (Fixes: CVE-2016-9422, CVE-2016-9423,
  CVE-2016-9424, CVE-2016-9425, CVE-2016-9426, CVE-2016-9428, CVE-2016-9429,
  CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434,
  CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439,
  CVE-2016-9440, CVE-2016-9441, CVE-2016-9442, CVE-2016-9443, CVE-2016-9622,
  CVE-2016-9623, CVE-2016-9624, CVE-2016-9625, CVE-2016-9626, CVE-2016-9627,
  CVE-2016-9628, CVE-2016-9629, CVE-2016-9630, CVE-2016-9631, CVE-2016-9632,
  CVE-2016-9633, CVE-2018-6196, CVE-2018-6197, CVE-2018-6198).

- Applied patches from Debian and Gentoo (Fixes: CVE-2004-2779).

- Updated to upstream version 3.5 (Fixes: CVE-2017-7875).

- Applied security fixes from upstream (Fixes: CVE-2020-9272, CVE-2020-9273).
- Built with system libcap.

- 2.4.3 (fixes: CVE-2020-24455)

- Applied security fixes from upstream (Fixes: CVE-2019-17498).

- Updated to upstream version 3.96 (Fixes: CVE-2019-20805).

- Applied security fixes from upstream (Fixes: CVE-2020-15173).

- Applied security fixes from upstream (Fixes: CVE-2020-15953).

- Applied security fixes from upstream (Fixes: CVE-2019-10216, CVE-2019-14811,
  CVE-2019-14812, CVE-2019-14813, CVE-2019-14817, CVE-2019-14869).