# changelog

author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Than Ngo <than@redhat.com> - 120.0.6099.199-1
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
     * CVE-2024-0222: Use after free in ANGLE
     * CVE-2024-0223: Heap buffer overflow in ANGLE
     * CVE-2024-0224: Use after free in WebAudio
     * CVE-2024-0225: Use after free in WebGPU


author: Than Ngo <than@redhat.com> - 120.0.6099.224-1
changelog:
  - update to 120.0.6099.224
    * High CVE-2024-0517: Out of bounds write in V8
    * High CVE-2024-0518: Type Confusion in V8
    * High CVE-2024-0519: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 121.0.6167.85-1
changelog:
  - update to 121.0.6167.85
    * High CVE-2024-0807: Use after free in WebAudio
    * High CVE-2024-0812: Inappropriate implementation in Accessibility
    * High CVE-2024-0808: Integer underflow in WebUI
    * Medium CVE-2024-0810: Insufficient policy enforcement in DevTools
    * Medium CVE-2024-0814: Incorrect security UI in Payments
    * Medium CVE-2024-0813: Use after free in Reading Mode
    * Medium CVE-2024-0806: Use after free in Passwords
    * Medium CVE-2024-0805: Inappropriate implementation in Downloads
    * Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
    * Low CVE-2024-0811: Inappropriate implementation in Extensions API
    * Low CVE-2024-0809: Inappropriate implementation in Autofill


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20231101gitdad6419-1
changelog:
  - Update to 0^20231101gitdad6419
  - Upstream has fixed bugs in string_algo, program_options, and thread_pool
    snippets/libraries


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.45.0-2
changelog:
  - Lower minimum version of assert_cmd to 2.0.4 (2.0.8 needs cargo2rpm,
    2.0.5 was never packaged)
  - rebuild against libmimalloc-sys 0.1.30


author: Ding-Yi Chen <dchen@redhat.com> - 1.27.0-1
changelog:
  - Fixes Bug 2255716 - efl-1.27.0 is available
  - Add BuildRequires: libjxl-devel
  - Documents:
    + Remove NEWS, because upstream no-longer have it
    + Rename README to README.md


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-3
changelog:
  - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
    Latex2e-translated-notice"


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-4
changelog:
  - Fix a heap overread in search_brace/lexi
  - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)


author: Eric Curtin <ecurtin@redhat.com> - 0.93-1
changelog:
  - More optimization, can now install initoverlayfs files for kernels that
    aren't currently running.


author: Stephen Smoogen <ssmoogen@redhat.com> - 0.98-1
changelog:
  - Release 0.98
  - Improve documentation (PR31 and ecurtin)
  - Only wait for bootfs storage device if it is configured (PR32)


author: Stephen Smoogen <ssmoogen@redhat.com> - 0.99-1
changelog:
  - Update to 0.99 release.
  - shellcheck corrections (Yariv)
  - install: detect where the initramfs exists (Douglas)
  - fix bootfs wait (Eric)
  - Add code for packit
  - Add autotools items for building.


author: Christoph Erhardt <fedora@sicherha.de> - 2.0.0-1
changelog:
  - Bump version to 2.0.0
  - Change license from AGPL-3.0-or-later to MIT
  - Update version number of bundled tbb package to 2021.9
  - Remove `ExcludeArch` as mold now supports MIPS64


author: Christoph Erhardt <fedora@sicherha.de> - 2.4.0-2
changelog:
  - Don't build-require files outside of permitted directories
  - Drop upstreamed tbb patch
  - Build against system-provided tbb where available
  - Update version number of bundled tbb package to 2021.10
  - Skip broken unit tests on s390x


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Packit <hello@packit.dev> - 0.2.3-1
changelog:
  - 0.2.3 (Jan Rodak)
  - Determine which product use (Jan Rodak)
  - Discover upstream (Jan Rodak)
  - Run only smoke test in Testing Farm (Jan Rodak)
  - Add weekly execution of integration test (Jan Rodak)
  - Add tmt tests (Jan Rodak)
  - Add tmt plan (Jan Rodak)
  - Modify the smoke test to use different ARF reports (Jan Rodak)
  - Add script for generation of ARF report (Jan Rodak)
  - Add filter for rule id (Jan Rodak)
  - Select new multi-check rules (Jan Rodak)
  - Create copy of multi-check rule for every OVAL definition (Jan Rodak)
  - Make method _get_applicable_cpe_ids_for_machine part of ProfileInfo and rename the method to get_list_of_cpe_platforms_that_satisfy_evaluation_target (Jan Rodak)
  - Adapt input of oval_cpe_definiton in test (Jan Rodak)
  - Adapt the mapping of OVAL definitions to the new OVAL definition analysis system and specify which OVAL result report is for CPE (Jan Rodak)
  - Parse all OVAL definition from all OVAL result reports (Jan Rodak)
  - Add parsing of OVAL refence to OVAL report (Jan Rodak)
  - Load all oval reports present in ARF report (Jan Rodak)
  - Fix typo in link (Jan Rodak)
  - Sync tests with downstream (Jan Rodak)
  - Add required parameter (Jan Rodak)
  - Move unit tests from interation_tests direcory (Jan Rodak)
  - Move function get_fake_args to test utils (Jan Rodak)
  - Create separate job propose_downstream for EPEL8 (Jan Rodak)
  - Sort chapters (Jan Rodak)
  - Add manual about report content (Jan Rodak)
  - Add assets (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add license tag (Jan Rodak)
  - Add explanation of result of OVAL definition (Jan Rodak)
  - Parse class of OVAL definition (Jan Rodak)
  - Add tests for CPE AL (Jan Rodak)
  - Fix negation of logical test (Jan Rodak)
  - Add support for check-fact-ref element in CPE-AL (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.4-1
changelog:
  - 0.2.4 (Jan Rodak)
  - Rename field Result explained to Class explained (Jan Rodak)
  - Add button back to top (Jan Rodak)
  - Generate tooltip when hover the mouse over the OVAL operator (Jan Rodak)
  - Fix persistance of checkboxes after refresh browser (Jan Rodak)
  - Add functionality to buttons (Jan Rodak)
  - Add buttons (Jan Rodak)
  - Set logging severity from warning to info for missing fonts problem (Jan Rodak)
  - Change fonts to week dependency (Jan Rodak)
  - Disable scrollbar (Jan Rodak)
  - Show tooltip for NOT (Jan Rodak)
  - Add explanations (Jan Rodak)
  - Generate tooltip (Jan Rodak)
  - Set tooltip position for OVAL and CPE AL operators (Jan Rodak)
  - Add new tooltip when user click on copy to clipboard (Jan Rodak)
  - Rename tooltip class (Jan Rodak)
  - Add new lines on end of file (Jan Rodak)
  - Update eslint config (Jan Rodak)
  - Implement clear button for search bar (Jan Rodak)
  - Change title (Jan Rodak)
  - Use the same title for the page title and report title (Jan Rodak)
  - Using span element instead of link element when href is not available (Jan Rodak)
  - Add non-breaking space (Jan Rodak)
  - Add missing package (Jan Rodak)
  - Update modules docs (Jan Rodak)
  - Add documentation on how to run the test suite (Jan Rodak)
  - Add usage from source (Jan Rodak)
  - Add installation from source and PyPi (Jan Rodak)
  - Update README (Jan Rodak)
  - Sync generate_arf.sh (Jan Rodak)
  - Remove execution of integration test on push to main (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Stephen Smoogen <smooge@fedoraproject.org> - 2-2
changelog:
  - Make changes to match spec review https://bugzilla.redhat.com/show_bug.cgi?id=2258110
  - Make debugsource not run on el9
  - Fix phytool code for asprintf warning
  - Fix makefile for missing bindir and md5sum


author: Stephen Smoogen <smooge@fedoraproject.org> - 2-3
changelog:
  - Update comments to point to upstream PR
  - Update man page.
  - Fixed man page entry to match spec review


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Fix Source URL (frostyx@email.cz)
  - Unify descriptions and mention querying bodhi (frostyx@email.cz)
  - Link fedfind project (frostyx@email.cz)
  - make repository REUSE compliant (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Packit <hello@packit.dev> - 0.42.0-1
changelog:
  - A bug in ogr resulting in returning only first page of pull requests for Pagure has been fixed. (#761)
  - ogr now raises `GitForgeInternalError` rather than `PagureAPIException` when getting 50x response from the Pagure API. (#762)


author: Packit <hello@packit.dev> - 0.43.0-1
changelog:
  - Fixes an issue with project->service mapping where the service with an url not containing the service type wasn't matched. (#771)


author: Packit <hello@packit.dev> - 0.44.0-1
changelog:
  - OGR now understands a few community-hosted GitLab instances that could not be determined automatically from the hostname. Thanks to that, you don't need to hardcode these instances to be mapped correctly. (#775)


author: Packit <hello@packit.dev> - 0.46.0-1
changelog:
  - We have fixed a bug in `get_fork` method for Pagure about checking the usernames for a match when going through existing forks. (#800)


author: Packit <hello@packit.dev> - 0.47.0-1
changelog:
  - Added support for removing users/groups from a project and possibility to check for groups with permissions to modify a PR. (#815)
  - Resolves rhbz#2125279


author: Packit <hello@packit.dev> - 0.47.1-1
changelog:
  - Fixed an issue where getting a list of GitLab merge requests using `.list()` would return only 20 items. (#819)
  - Resolves rhbz#2246994


author: Packit <hello@packit.dev> - 0.48.0-1
changelog:
  - There is a new get_pr_files_diff method supported for Pagure. (#826)
  - We have fixed a bug that GithubRelease.url returned an API URL. (#824)
  - Resolves rhbz#2255524


author: Packit <hello@packit.dev> - 0.49.0-1
changelog:
  - For Pagure there are 2 new methods available: one for getting users with specified access rights and one for getting members of a group. (#834)


author: Scott K Logan <logans@cottsay.net> - 0.9.3-1
changelog:
  - Update to 0.9.3 (rhbz#2241970)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros
  - Switch to SPDX license identifier


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.22-2
changelog:
  - For Fedora 39, build an extra module against Python 3.11
  - Disable PIE and enable PIC for the mail executable to avoid crashes when using
    the PHP module (see BZ2203863)


author: Remi Collet <remi@remirepo.net> - 2.0.22-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php83
  - add patch for PHP 8.3 from
    https://github.com/unbit/uwsgi/pull/2559


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60
   - Support for dynamic snapshot data exclusions
   - Apparmor userspace is vendored inside the snapd snap
   - Added a default-configure hook that exposes gadget default
     configuration options to snaps during first install before
     services are started
   - Allow install from initrd to speed up the initial installation
     for systems that do not have a install-device hook
   - New `snap sign --chain` flag that appends the account and
     account-key assertions
   - Support validation-sets in the model assertion
   - Support new "min-size" field in gadget.yaml
   - New interface: "userns"


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.1
   - install: fallback to lazy unmount() in writeFilesystemContent
   - data: include "modprobe.d" and "modules-load.d" in preseeded blob
   - gadget: fix install test on armhf
   - interfaces: fix typo in network_manager_observe
   - sandbox/apparmor: don't let vendored apparmor conflict with system
   - gadget/update: set parts in laid out data from the ones matched
   - many: move SnapConfineAppArmorDir from dirs to sandbox/apparmor
   - many: stop using `-O no-expr-simplify` in apparmor_parser
   - go.mod: update secboot to latest uc22 branch


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.2
   - i/builtin: allow directories in private /dev/shm
   - i/builtin: add read access to /proc/task/schedstat in system-
     observe
   - snap-bootstrap: print version information at startup
   - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948
   - snap, store: filter out invalid snap edited links from store info
     and persisted state
   - o/configcore: write netplan defaults to 00-snapd-config on seeding
   - snapcraft.yaml: pull in apparmor_parser optimization patches from
     https://gitlab.com/apparmor/apparmor/-/merge_requests/711
   - snap-confine: fix missing \0 after readlink
   - cmd/snap: hide append-integrity-data
   - interfaces/opengl: add support for ARM Mali


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.3
   - i/b/shared-memory: handle "private" plug attribute in shared-
     memory interface correctly
   - i/apparmor: support for home.d tunables from /etc/


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


