# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.1-7
changelog:
  - Security fix for CVE-2022-28041
  - Drop dependency on pkgconfig(zzip-zlib-config), no longer available in
    zziplib; use zlib directly instead


author: Felix Kaechele <felix@kaechele.ca> - 1.7.15-1
changelog:
  - update to 1.7.15
  - upstream removed `upgrade-borgmatic-config` command
  - updated module import for bash completion


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Than Ngo <than@redhat.com> - 120.0.6099.199-1
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
     * CVE-2024-0222: Use after free in ANGLE
     * CVE-2024-0223: Heap buffer overflow in ANGLE
     * CVE-2024-0224: Use after free in WebAudio
     * CVE-2024-0225: Use after free in WebGPU


author: Miroslav Suchý <msuchy@redhat.com> 1.97-1
changelog:
  - update copr keys
  - add script to check all keys
  - remove expired jenkins key
  - update expired intel security key
  - update expired navy linux key
  - update expired bluejeans key
  - add script to check expiration
  - Add the key for pkgs.k8s.io (Kubernetes)


author: Miroslav Suchý <msuchy@redhat.com> 1.99-1
changelog:
  - update copr keys
  - Add Qubes OS 4.2 release key
  - Split AlmaLinux OS 8 GPG public keys to fix microdnf
  - Update AlmaLinux OS 8 public key


author: Jos de Kloe <josdekloe@gmail.com> - 2.29.0-1
changelog:
  - Upgrade to upstream version 2.29.0
    Note that the source code now uses g++ in stead of gcc for compilation.


author: Michel Lind <salimma@fedoraproject.org> - 20230801-1
changelog:
  - Update to 20230801
  - use SPDX license identifiers; add LGPL-3.0-or-later for Breeze icons
  - fix rpmlint warning


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1
changelog:
  - New version
    Resolves: rhbz#2256145
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51766


author: Miroslav Suchý <msuchy@redhat.com> 1.29-1
changelog:
  - Add byacc public domain declaration
  - recognize and allow MPL-2.0+ license
  - public-domain-text.txt: Add a dedication found in zpaq
  - New license: MMIXware
  - not allowed license LicenseRef-Iozone
  - new license: Utah Raster Toolkit Run Length Encoded License
  - add license GPL-2.0-only WITH x11vnc-openssl-exception
  - not allowed license LicenseRef-Misti-Fonts
  - new license TTYP0
  - add license GPL-2.0-or-later WITH stunnel-exception
  - Add GPL-2.0-or-later WITH SANE-exception
  - Fix man-pages public-domain and UltraPermissive locations
  - generate additional grammar with all licenses inluding not allowed ones
  - cleanup: remove mkdsv.py


author: Miroslav Suchý <msuchy@redhat.com> 1.30-1
changelog:
  - new license: LGPL-3.0-or-later WITH openvpn-openssl-exception
  - new license: BSD-3-Clause-Sun
  - new license: BSD-Systemics
  - new license: FBM
  - new license: LGPL-2.0-or-later WITH Libtool-exception
  - new license: Ferguson-Twofish
  - Add Public Domain for varnish
  - new license: MPEG-SSG
  - Add cursor-misc from xorg-x11-fonts to UltraPermissive
  - new not allowed license: MPEG-4 Audio
  - new license: pnmstitch
  - Add snprintf as allowed
  - Add xlock as allowed
  - Add BSD-4.3RENO as allowed
  - Add public domain entry for winitzki-cyrillic X11 font
  - Public Domain: Add mobile-broadband-provider-info
  - Add public domain entry used by some xorg-x11-fonts
  - Add Volatility Software License 1.0 to Not Allowed Licenses
  - Add misc-cyrillic from xorg-x11-fonts to UltraPermissive
  - Add public domain entry for aopalliance
  - Add public domain entry for plexus-utils
  - not allowed license LicenseRef-pgplot
  - Fix a typo in xz-java package name


author: Miroslav Suchý <msuchy@redhat.com> 1.31-1
changelog:
  - new license: GPL-2.0-or-later WITH Autoconf-exception-macro
  - new license: LGPL-3.0-or-later WITH Autoconf-exception-macro
  - new license: HPND-export-US-modify
  - Add a public domain dedication from the SWORD Project
  - Add LPPL-1.2 as not-allowed, add LPPL-1.3a+ as allowed
  - new license: LGPL-2.1-only WITH Qt-LGPL-exception-1.1
  - new license: SGI-OpenGL
  - Add jhash public domain dedication for QEMU
  - Add QEMU to the rijndael (AES) public domain license reference
  - new license: SSH-short
  - new license: GPL-2.0-or-later WITH UBDL-exception
  - new license: McPhee-slideshow
  - new license: HPND-DEC
  - new license: magaz
  - new license: ulem
  - new license: fwlw
  - new license: Kastrup
  - Fix names of Linux-syscall-note TOML files
  - Add reference to EDK2 package public domain code
  - new license: HPND-sell-regexpr
  - new license: Cronyx
  - new license: Lucida-Bitmap-Fonts
  - new license: LPPL-1.3c
  - new license: swrule
  - new license: BSD-Inferno-Nettverk
  - Some code in OpenSSH has a Public Domain license
  - new license: ssh-keyscan
  - new license: HPND-Pbmplus
  - Add public domain text from mingw-headers/mingw-winpthreads packages
  - Add public domain test from Augeas project
  - new license: BSD-Attribution-HPND-disclaimer
  - new not allowed license: LicenseRef-Tyrian
  - Add public domain entry for squid


author: Miroslav Suchý <msuchy@redhat.com> 1.32-1
changelog:
  - new not allowed license LicenseRef-Riverbank-SIP
  - new license: LGPL-2.1-only_WITH_Linux-syscall-note
  - new license: LicenseRef-Fedora-Logos
  - new license: GPL-3.0-or-later WITH GNU-compiler-exception
  - new license: HPND-doc-sell
  - new license: BSD-3-Clause-flex
  - new license: HPND-doc
  - new license: LGPL-2.1-or-later WITH GCC-exception-2.0
  - Add GPL-2.0-or-later WITH GPL-3.0-linking-source-exception
  - new license: BSD-3-Clause-HP
  - new license: GFDL-1.3-no-invariants-only
  - new license: OLDAP-2.7
  - new license: Adobe-Utopia
  - new license: python-ldap
  - new license: lsof


author: Miroslav Suchý <msuchy@redhat.com> 1.33-1
changelog:
  - add packages_with_exceptions to JSON schema
  - document packages_with_exceptions for LicenseRef-Fedora-Logos
  - document packages_with_exceptions for LicenseRef-TCGL
  - document packages_with_exceptions for FDK-AAC
  - include packages_with_exceptions field in json and in toml validation
  - Template - document exception of not-allowed license
  - not allowed license LicenseRef-novint


author: Miroslav Suchý <msuchy@redhat.com> 1.35-1
changelog:
  - add argon2 as known exception to CC0-1.0
  - new license: LicenseRef-BSD-3-Clause-Clear-WITH-AdditionRef-AOMPL-1.0
  - new license: LicenseRef-BSD-2-Clause-WITH-AdditionRef-AOMPL-1.0
  - new license: GCR-docs
  - new license: AML-glslang
  - new license: Pixar


author: Miroslav Suchý <msuchy@redhat.com> 1.36-1
changelog:
  - new license: TCP-wrappers
  - new license: LicenseRef-Not-Copyrightable
  - new license: SAX-PD-2.0
  - new license: radvd


author: Miroslav Suchý <msuchy@redhat.com> 1.37-1
changelog:
  - add license HPND-Kevlin-Henney
  - add license FSFAP-no-warranty-disclaimer
  - add not allowed license LicenseRef-Nikto
  - add LicenseRef-Fedora-Firmware


author: Miroslav Suchý <msuchy@redhat.com> 1.38-1
changelog:
  - add GPL-2.0-or-later WITH Bison-exception-1.24
  - Add Unicode-3.0 license
  - Add ISC-Veillard license
  - Add mailprio license
  - Add BSD-Systemics-W3Works license
  - Modify .reuse/dep5
  - Add UltraPermissive notices for libmtp
  - public domain dedication for rwhoisd
  - public domain dedication for openshadinglanguage
  - public domain dedication for remind


author: Jens Petersen <petersen@redhat.com> - 9.6.2-10
changelog:
  - base subpkg now owns ghcliblib and ghclibplatform dirs (#2185357)
  - update BSD license tags to SPDX


author: Jens Petersen <petersen@redhat.com> - 9.6.3-12
changelog:
  - s390x: fix llvm alignment in data sections (@stefansf (IBM))
    which should fix certain runtime crashes (#2248097)


author: Mark E. Fuller <mark.e.fuller@gmx.de> - 0.18.0-1
changelog:
  - restore acme/autocert on epel9 and update to v0.18.0, close rhbz#2255095
    - CVE-2023-48795 golang-x-crypto: ssh: Prefix truncation attack on Binary
    Packet Protocol


author: Paul Howarth <paul@city-fan.org> - 3.3.112-1
changelog:
  - Update to 3.3.112
    - VCD reader fixes for unnamed Icarus begin blocks
    - String data type crash fix in fst.c
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 3.3.115-1
changelog:
  - Update to 3.3.115
    - Fix VZT reader with -fstrict-aliasing
    - Fix use_multi_state condition in vzt_write.c
    - Fix for UNDEF vs strings at start of a vzt file
    - Fix sleep() time scaling redefine for mingw
    - Use MapViewOfFileEx for mmap on Windows (fstapi)
    - Define FST_DO_MISALIGNED_OPS on AArch64 (fstapi)
    - Fixed attrbegin short length problem


author: Paul Howarth <paul@city-fan.org> - 3.3.116-1
changelog:
  - Update to 3.3.116
    - Fix manpage/odt for vcd2fst command switch documentation for zlibpack
    - Add GDK_WINDOWING_WAYLAND check for gdkwayland.h header usage
    - Change sprintf to snprintf in fstapi.c
    - Fix init crash on show_base_symbols enabled


author: Paul Howarth <paul@city-fan.org> - 3.3.118-1
changelog:
  - Update to 3.3.118
    - Update xml2stems to handle newer "loc" vs. "fl" xml tags
    - Change preg_regex_c_1 decl to use regex_t* as datatype
    - Move gtkwave.appdata.xml to io.github.gtkwave.GTKWave.metainfo.xml
    - Fixed popen security advisories:
      - TALOS-2023-1786 (CVE-2023-35963, CVE-2023-35960, CVE-2023-35964,
  		       CVE-2023-35959, CVE-2023-35961, CVE-2023-35962)
    - Fixed FST security advisories:
      - TALOS-2023-1777 (CVE-2023-32650)
      - TALOS-2023-1783 (CVE-2023-35704, CVE-2023-35703, CVE-2023-35702)
      - TALOS-2023-1785 (CVE-2023-35956, CVE-2023-35957, CVE-2023-35958,
  		       CVE-2023-35955)
      - TALOS-2023-1789 (CVE-2023-35969, CVE-2023-35970)
      - TALOS-2023-1790 (CVE-2023-35992)
      - TALOS-2023-1791 (CVE-2023-35994, CVE-2023-35996, CVE-2023-35997,
  		       CVE-2023-35995)
      - TALOS-2023-1792 (CVE-2023-35128)
      - TALOS-2023-1793 (CVE-2023-36747, CVE-2023-36746)
      - TALOS-2023-1797 (CVE-2023-36864)
      - TALOS-2023-1798 (CVE-2023-36915, CVE-2023-36916)
    - Fixed evcd2vcd security advisories:
      - TALOS-2023-1803 (CVE-2023-34087)
    - Fixed VCD security advisories:
      - TALOS-2023-1804 (CVE-2023-37416, CVE-2023-37419, CVE-2023-37420,
  		       CVE-2023-37418, CVE-2023-37417)
      - TALOS-2023-1805 (CVE-2023-37447, CVE-2023-37446, CVE-2023-37445,
  		       CVE-2023-37444, CVE-2023-37442, CVE-2023-37443)
      - TALOS-2023-1806 (CVE-2023-37576, CVE-2023-37577, CVE-2023-37573,
  		       CVE-2023-37578, CVE-2023-37575, CVE-2023-37574)
      - TALOS-2023-1807 (CVE-2023-37921, CVE-2023-37923, CVE-2023-37922)
    - Fixed VZT security advisories:
      - TALOS-2023-1810 (CVE-2023-37282)
      - TALOS-2023-1811 (CVE-2023-36861)
      - TALOS-2023-1812 (CVE-2023-38618, CVE-2023-38621, CVE-2023-38620,
  		       CVE-2023-38619, CVE-2023-38623, CVE-2023-38622)
      - TALOS-2023-1813 (CVE-2023-38649, CVE-2023-38648)
      - TALOS-2023-1814 (CVE-2023-38651, CVE-2023-38650)
      - TALOS-2023-1815 (CVE-2023-38653, CVE-2023-38652)
      - TALOS-2023-1816 (CVE-2023-35004)
      - TALOS-2023-1817 (CVE-2023-39235, CVE-2023-39234)
    - Fixed LXT2 security advisories:
      - TALOS-2023-1818 (CVE-2023-39273, CVE-2023-39271, CVE-2023-39274,
  		       CVE-2023-39275, CVE-2023-39272, CVE-2023-39270)
      - TALOS-2023-1819 (CVE-2023-34436)
      - TALOS-2023-1820 (CVE-2023-39316, CVE-2023-39317)
      - TALOS-2023-1821 (CVE-2023-35057)
      - TALOS-2023-1822 (CVE-2023-35989)
      - TALOS-2023-1823 (CVE-2023-38657)
      - TALOS-2023-1824 (CVE-2023-39413, CVE-2023-39414)
      - TALOS-2023-1826 (CVE-2023-39443, CVE-2023-39444)
      - TALOS-2023-1827 (CVE-2023-38583)


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.1-1
changelog:
  - https://github.com/pmikova/java-runtime-decompiler/releases/tag/java-runtime-decompiler-7.1
  - moved to jrd 7.1
  - added desp on java-diff and new cplc
  - fixed(?) procyon wrapper
    - todo procyon crashes witout trace
  - removed jd wrapper (was new in 7.1, maybe will be added)
  - split plugins to subpkgs
  - added jrd-hex launcher
  - added hex launcher, added jrd symlinks


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.3-1
changelog:
  - moved to 7.3
  - https://github.com/pmikova/java-runtime-decompiler/releases/tag/java-runtime-decompiler-7.3
  - https://github.com/pmikova/java-runtime-decompiler/releases/tag/java-runtime-decompiler-7.2


author: Fedora Release Engineering <releng@fedoraproject.org> - 8.0-1
changelog:
  - update dto 8.0
  - https://github.com/pmikova/java-runtime-decompiler/releases/tag/java-runtime-decompiler-8.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 9.1-1
changelog:
  - update dto 9.1
  - https://github.com/judovana/java-runtime-decompiler/releases/tag/java-runtime-decompiler-9.1
  - https://github.com/judovana/java-runtime-decompiler/releases/tag/java-runtime-decompiler-9.0


author: Julian Sikorski <belegdol@fedoraproject.org> - 2.53.1-2
changelog:
  - Disable xdotool clipboard workaround to prevent passwords from leaking to
    systemd journal (CVE-2022-0725)


author: Julian Sikorski <belegdol@fedoraproject.org> - 2.55-2
changelog:
  - Cleanup for upcoming re-review
  - Do not own %%docdir
  - Flag license file as %%license
  - Migrate to SPDX license


author: Vitaly Zaitsev <vitaly@easycoding.org> - 2.8.0-2
changelog:
  - Fixed metadata manifest. Enabled validator.
  - Fixed directories ownership.
  - Disabled HTML patching.


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - open https://jira.mongodb.org/browse/MONGOCRYPT-451 build with shared libbson
  - open https://jira.mongodb.org/browse/MONGOCRYPT-460 ABI/API breakage


author: TI_Eugene <ti.eugene@gmail.com) - 1.6.1-1
changelog:
  - Version Bump
  - Sources URL changed
  - new binaries: lumina-checkpass, lumina-pingcursor
  - Required pam-devel added
  - Suggested la-capitaine-icon-theme added
  - lumina-icons package added


author: Pavel Raiskup <praiskup@redhat.com> 3.4-1
changelog:
  - make device mapper control device available if supported (neal@gompa.dev)
  - check for target specific qemu-user-static (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.5-1
changelog:
  - check for qemu-user-static raises InvalidArchitecture()
  - forcearch: map armv7hl to the /usr/bin/qemu-arm-static binary
  - more pedantic check for the qemu-*-static binaries


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Petr Pisar <ppisar@redhat.com> - 1.12-31
changelog:
  - Convert the license tag to an SPDX format
  - Correct listing the dependencies
  - Move Apache::AuthDBI to perl-Apache-AuthDBI RPM package


author: Ondřej Nosek <onosek@redhat.com> - 1.66-6
changelog:
  - Patch: Pre-push hook won't check private branches
  - Patch: Config file option to skip the hook script creation
  - Patch: Allow empty commits when `uses_rpmautospec`
  - Patch: Check remote file with correct hash
  - Patch: Ignore missing spec file in pre-push hook
  - Patch: import_srpm: allow pre-generated srpms


author: Ondřej Nosek <onosek@redhat.com> - 1.66-7
changelog:
  - Patch: Do not require 'sources' file for all namespaces
  - Use release's rpmdefines in unused sources check


author: Ondřej Nosek <onosek@redhat.com> - 1.66-11
changelog:
  - Patch: Support for checking exploded sources before push
  - Patch: Split git credential data on first = only


author: Ondřej Nosek <onosek@redhat.com> - 1.66-12
changelog:
  - Patch: Fix flake8 complaints
  - Patch: Prepare the lookaside cache code for retries
  - Patch: Lookaside cache operations retries
  - Patch: Make lookaside cache retries configurable


author: Ondřej Nosek <onosek@redhat.com> - 1.66-13
changelog:
  - Patch: *pkg import: Don't delete changelog generated by `rpmautospec convert`
  - Patch: *pkg import: Undo rpmautospec processing
  - Patch: Unittests for "Undo rpmautospec processing"


author: Miro Hrončok <mhroncok@redhat.com> - 1.66-14
changelog:
  - Actually add the patches:
  - Patch: *pkg import: Don't delete changelog generated by `rpmautospec convert`
  - Patch: *pkg import: Undo rpmautospec processing
  - Patch: Unittests for "Undo rpmautospec processing"


author: Ondřej Nosek <onosek@redhat.com> - 1.66-15
changelog:
  - Patch: Add option to mockbuild use default resultdir of mock (v3)
  - Patch: mockbuild`: new argument --extra-pkgs
  - Patch: `copr-build` passes extra_args to copr-cli command


author: Miro Hrončok <mhroncok@redhat.com> - 20.17.1-2
changelog:
  - Use wheels from /usr/share/python3.11-wheels when creating Python 3.11 virtual environments
  - Require Python 3.11 wheels when Python 3.11 is installed


author: Miro Hrončok <mhroncok@redhat.com> - 20.21.1-1
changelog:
  - Update to 20.21.1
  - Backport from 20.23.0: Don't install setuptools and wheel to Python 3.12+ environments
  - Add RPM Requires needed for Python 3.12


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.18-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.18.
  - Added verification of upstream signature.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.19-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.19.
  - Update rules for AppStream metainfo and desktop files.


