# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.1-7
changelog:
  - Security fix for CVE-2022-28041
  - Drop dependency on pkgconfig(zzip-zlib-config), no longer available in
    zziplib; use zlib directly instead


author: Than Ngo <than@redhat.com> - 119.0.6045.159-1
changelog:
  - update to 119.0.6045.159, upstream security release
     High CVE-2023-5997, use after free in Garbage Collection
     High CVE-2023-6112, use after free in Navigation
  - add Requires/Conflicts for ABI break in fmpeg-free 6.0.1
  - drop first_dts patch, reintroduce first_dts patch in ffmpeg-free-6.0.1
  - fixed python3 syntaxWarning: invalid escape sequenc
  - skip clang's patches for epel8 that now gets clang-16 update


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.5.0-2
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
    CVE-2022-27191, CVE-2022-29526, CVE-2022-30629


author: Robert-André Mauchin <zebob.m@gmail.com> - 2021.1.2-1
changelog:
  - Bump to commit 852a31a10f5fc943bff9b7857d352b317e1bcc3e (fix FTBFS)
    Close: rhbz#2045645 Close: rhbz#1994431


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.2.0-6
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.15.2-2
changelog:
  - Temporarily disable dark theme support to work around Wayland issue
  - switch to using SPDX license identifier


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-2
changelog:
  - sort BRs alphabetically
  - limit build dependencies to only those strictly required
  - update license field with SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-4
changelog:
  - call tmpfiles_create macro to create /run/minidlna after installation
  - add logrotate config drop-in based on Debian


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-5
changelog:
  - use sysusers.d to pre-create system user account
  - make the sed expression easier to read
  - adjust description


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.3-2
changelog:
  - Port to pyproject-rpm-macros
  - Add metapackage for “speedups” extra
  - Update License to SPDX
  - Add conditionals for EPEL9 support


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.1-1
changelog:
  - Update to version 5.6.1
  - Add --use-pep517 --no-build-isolation to pip options for Fedora and EPEL 9+


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 21.12-3.20220401git8228f0d
changelog:
  - Comment some of the config options makes for more sensible defaults
  - Use install instead of cp for config file


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


