Changelog for libselinux1-3.7-194.3.x86_64.rpm :

* Thu Jul 11 2024 Cathy Hu - Fix segfault caused by upstream changes in selabel_open(): libselinux-set-free-d-data-to-NULL.patch Can be removed once it is upstream.
* Mon Jul 01 2024 Cathy Hu - Update to version 3.7 https://github.com/SELinuxProject/selinux/releases/tag/3.7
* User-visible changes
* libselinux/utils/selabel_digest: drop unsupported option -d
* libselinux/utils: improve compute_av output
* libselinux: fail selabel_open(3) on invalid option
* Improved man pages
* Improvements
* libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
* libselinux: enable usage with pedantic UB sanitizers
* libselinux: support huge passwd/group entries
* Bugfixes:
* libselinux/utils/selabel_digest: avoid buffer overflow
* libselinux: avoid pointer dereference before check
* libselinux/utils/selabel_digest: pass BASEONLY only for file backend
* libselinux: free empty scandir(3) result
* libselinux: free data on selabel open failure
* libselinux: use reentrant strtok_r(3)
* Tue Dec 19 2023 Cathy Hu - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6
* libselinux: performance optimization for duplicate detection
* Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system
* Add notself support for neverallow rules
* Improve man pages
* man pages: Remove the Russian translations
* Add notself and other support to CIL
* Add support for deny rules
* Translations updated from https://translate.fedoraproject.org/projects/selinux/
* Bug fixes- Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach
* Sun Oct 01 2023 Georg Pfuetzenreuter - Repair initrd libselinux check in selinux-ready
* Tue Aug 08 2023 Dominique Leuenberger - Do not BuildRequire swig and ruby-devel in the main build phase: those are only needed for the bindings.
* Fri Aug 04 2023 Matej Cepl - (bsc#1212618) Divide libselinux and libselinux-bindings again. libselinux itself is in Ring0 so it has to have absolutely minimal dependencies, so it is better to separate libselinux-bindings into a separate pacakge.
* Tue Jul 04 2023 Johannes Segitz - Fix python packaging by setting the name to a fixed value
* Fri Jun 23 2023 Matej Cepl - Remove separate libselinux-bindings SPEC file (bsc#1212618).
* Tue Jun 20 2023 Johannes Segitz - Add explicit BuildRequires for python3-pip and python3-wheel on 15.5, currently the macros don\'t do the right thing
* Thu Jun 01 2023 Johannes Kastl - allow building this with different python versions, to make this usable for the new sle15 macro (using python3.11)
* Fri May 05 2023 Daniel Garcia - Add python-wheel build dependency to build correctly with latest python-pip version.
* Thu May 04 2023 Frederic Crozat - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS.
* Fri Mar 24 2023 Johannes Segitz - Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO
* Thu Mar 23 2023 Martin Liška - Enable LTO as it works fine now.
* Fri Feb 24 2023 Johannes Segitz - Update to version 3.5:
* check for truncations
* avoid newline in avc message
* bail out on path truncations
* add getpidprevcon to gather the previous context before the last exec of a given process
* Workaround for heap overhead of pcre
* fix memory leaks on the audit2why module init
* ignore invalid class name lookup- Drop restorecon_pin_file.patch, is upstream- Refreshed python3.8-compat.patch- Added additional developer key (Jason Zaman)
* Thu Jul 07 2022 Johannes Segitz - Fixed initrd check in selinux-ready (bnc#1186127)
* Tue May 31 2022 Johannes Segitz - Added restorecon_pin_file.patch. Fixes issus when running fixfiles/restorecon
* Mon May 09 2022 Johannes Segitz - Update to version 3.4:
* Use PCRE2 by default
* Make selinux_log() and is_context_customizable() thread-safe
* Prevent leakeing file descriptors
* Correctly hash specfiles larger than 4G- Refreshed skip_cycles.patch
* Tue Feb 15 2022 Johannes Segitz - Add Requires for exact libselinux1 version for selinux-tools- Simplyfied check for correct boot paramaters in selinux-ready (bsc#1195361)
* Thu Nov 11 2021 Johannes Segitz - Update to version 3.3:
* Lots of smaller issues fixed found by fuzzing
* Sun Jul 18 2021 Callum Farmer - Add missing libselinux-utils Provides to selinux-tools so that %selinux_requires works
* Mon Apr 26 2021 Johannes Segitz - Remove Recommends for selinux-autorelabel. It\'s better to have this in the policy package itself (bsc#1181837)
* Wed Mar 17 2021 Dominique Leuenberger - Switch to pcre2: + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8) + Pass USE_PCRE2=y to make. + Replace pkgconfig(libpcre) Requires in -devel static with pkgconfig(libpcre2-8).
* Tue Mar 09 2021 Johannes Segitz - Update to version 3.2:
* Use mmap()\'ed kernel status page instead of netlink by default. See \"KERNEL STATUS PAGE\" section in avc_init(3) for more details.
* New log callback levels for enforcing and policy load notices - SELINUX_POLICYLOAD, SELINUX_SETENFORCE
* Changed userspace AVC setenforce and policy load messages to audit format.
* Sat Feb 06 2021 Matej Cepl - Add Recommends: selinux-autorelabel, which is very important for healthy use of the SELinux on the system (/.autorelabel mechanism) (bsc#1181837).