# changelog

author: Robert Scheck <robert@fedoraproject.org> 3.18.0-3
changelog:
  - Add the baresip-avcodec, baresip-avfilter, baresip-avformat and
    baresip-swscale subpackages for Fedora and RHEL 9 (and newer)


author: Than Ngo <than@redhat.com> - 131.0.6778.139-1
changelog:
  - Update to 131.0.6778.139
    * High CVE-2024-12381: Type Confusion in V8
    * High CVE-2024-12382: Use after free in Translate


author: Than Ngo <than@redhat.com> - 131.0.6778.204-1
changelog:
  - Update to 131.0.6778.204
    * High CVE-2024-12692: Type Confusion in V8
    * High CVE-2024-12693: Out of bounds memory access in V8
    * High CVE-2024-12694: Use after free in Compositing
    * High CVE-2024-12695: Out of bounds write in V8


author: Than Ngo <than@redhat.com> - 132.0.6834.83-1
changelog:
  - Update to 132.0.6834.83
    * High CVE-2025-0434: Out of bounds memory access in V8
    * High CVE-2025-0435: Inappropriate implementation in Navigation
    * High CVE-2025-0436: Integer overflow in Skia
    * High CVE-2025-0437: Out of bounds read in Metrics
    * High CVE-2025-0438: Stack buffer overflow in Tracing
    * Medium CVE-2025-0439: Race in Frames
    * Medium CVE-2025-0440: Inappropriate implementation in Fullscreen
    * Medium CVE-2025-0441: Inappropriate implementation in Fenced
    * Medium CVE-2025-0442: Inappropriate implementation in Payments
    * Medium CVE-2025-0443: Insufficient data validation in Extensions
    * Low CVE-2025-0446: Inappropriate implementation in Extensions
    * Low CVE-2025-0447: Inappropriate implementation in Navigation
    * Low CVE-2025-0448: Inappropriate implementation in Compositing


author: Than Ngo <than@redhat.com> - 132.0.6834.110-1
changelog:
  - Update to 132.0.6834.110
    * High CVE-2025-0611: Object corruption in V8
    * High CVE-2025-0612: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 133.0.6943.53-1
changelog:
  - Update to 133.0.6943.53
    * CVE-2025-0444: Use after free in Skia
    * CVE-2025-0445: Use after free in V8
    * CVE-2025-0451: Inappropriate implementation in Extensions API


author: Than Ngo <than@redhat.com> - 133.0.6943.98-1
changelog:
  - Update to 133.0.6943.98
    * CVE-2025-0995: Use after free in V8
    * CVE-2025-0996: Inappropriate implementation in Browser UI
    * CVE-2025-0997: Use after free in Navigation
    * CVE-2025-0998: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 133.0.6943.126-1
changelog:
  - Update to 133.0.6943.126
    * CVE-2025-0999: Heap buffer overflow in V8
    * CVE-2025-1426: Heap buffer overflow in GPU
    * CVE-2025-1006: Use after free in Network


author: Miroslav Suchý <msuchy@redhat.com> 1.102-1
changelog:
  - update copr keys
  - Create cathugger.asc
  - Create zzz.key.asc
  - Create idk.key.asc
  - Create hulahoop.asc
  - Create adrelanos.asc
  - Create makemkv_pub.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.103-1
changelog:
  - update copr keys
  - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys
  - Add CentOS 10 and EPEL 10 GPG keys
  - add Alpine Linux and postmarketOS keys


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Jens Petersen <petersen@redhat.com> - 1.1-5
changelog:
  - exclude ix86
  - -help and hence help2man fail (since not in Arch). There are no 32bit
    images anyway.


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Miroslav Suchý <msuchy@redhat.com> 1.57-1
changelog:
  - add filedrop public domain dedication
  - add ddate public domain dedication
  - Add wgrib license text
  - add zork public domain dedication
  - add AGPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - allow CC-BY-SA 3.0 for fonts
  - add Boehm-GC-without-fee license
  - add LicenseRef-Julius as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.58-1
changelog:
  - add Ultra permissive dedication of docbook5-schemas
  - add public domain dedication for clc
  - add Sendmail-Open-Source-1.1 license
  - add public domain dedication for biblesync
  - add public domain dedication for BareBonesBrowserLaunch
  - add public domain dedication for astronomy-menus
  - add LGPL-2.1-only WITH OCCT-exception-1.0
  - add CERN-OHL-P-2.0
  - add Jam license
  - add public domain dedication for ants


author: Miroslav Suchý <msuchy@redhat.com> 1.59-1
changelog:
  - add public domain findings for sdl-telnet
  - add public domain findings for libmodplug
  - add public domain findings for mb2md
  - add public domain findings for perl-DateTime-Precise
  - add public domain findings for gimpfx-foundry
  - add public domain findings for gnome-valgrind-session
  - add public domain findings for sqlite2
  - Blessing.toml -> blessing.toml
  - add public domain findings for surfraw
  - add GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception
  - add public domain findings for klt
  - add public domain findings for libb64
  - add public domain dedication of emacs-slime
  - add public domain dedication of cproto
  - add public domain dedication for cockatrice
  - add LGPL-2.1-or-later WITH Independent-modules-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.60-1
changelog:
  - add LicenseRef-Intel-firmware
  - add public domain dedication for oflb-goudy-bookletter-1911-fonts
  - add public domain dedication for nacl
  - add Apache-2.0 WITH mxml-exception
  - add public domain dedication for nec2c
  - add any-OSI-perl-modules
  - add public domain dedication for ogre
  - add text of Unsplash license
  - add LicenseRef-Intel-firmware
  - add SGI-B-1.1 as not-allowed
  - add public domain dedication for libgenht
  - add ultra permissive findings for lyx
  - add public domain findings for golang-github-xi2-xz
  - add UltraPermissive dedication of package samcoupe-rom
  - add UltraPermissive dedication of package radial
  - add LicenseRef-MIT-CRL-Xim license as not-allowed
  - add public domain findings for icon
  - add public domain findings for jhead
  - add public domain findings for mingw-pdcurses
  - add LicenseRef-BASS (beneath a steel sky) as not-allowed
  - add public domain and ultra permissive findings for rubygem-ruby-shadow


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.63-1
changelog:
  - add LICENSE.Sigma from sigrok-firmware
  - Add public-domain text for python-zmq
  - add public domain for mg


author: Miroslav Suchý <msuchy@redhat.com> 1.64-1
changelog:
  - add copyleft-next-0.3.1 license
  - Add public-domain text for llvm-test-suite
  - document usage exception for fedora-remix-logos
  - add MIPS and ThirdEye licenses
  - add libcsv UltraPermissive dedication
  - Add public-domain text for stb


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Robert Scheck <robert@fedoraproject.org> 11.3.1-5
changelog:
  - backport from 11.3.1-4.4: s390x: add support for register arguments preserving (#2168204)
  - backport from 11.3.1-4.3: compile the cross binaries as PIE/-z now (#2155452)
  - backport from 11.3.1-4.2: ship libitm.spec in cross-gcc (#2154462)
  - backport from 11.3.1-4.1: add cross compiler functionality for non-production uses (#2149650)
  - backport from 11.3.1-4: update from releases/gcc-11-branch (#2117632)
  - backport from 11.3.1-4: fix the detection of Sapphire Rapids in host_detect_local_cpu
  - backport from 11.3.1-4: fix -Wmismatched-dealloc documentation (#2116635)


author: Robert Scheck <robert@fedoraproject.org> 11.4.1-3
changelog:
  - backport from 11.4.1-2.3: fix member vs global template (RHEL-2607)
  - backport from 11.4.1-2.2: guard the bit test merging code in if-combine (RHEL-6068)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2.1: use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2: update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-2
changelog:
  - backport from 11.5.0-2: fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - backport from 11.5.0-2: libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - backport from 11.5.0-2: fix wrong code with memcpy from _Complex (PR tree-optimization/116034)
  - backport from 11.5.0-1: update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
  - backport from 11.5.0-1: fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - backport from 11.5.0-1: fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)
  - backport from 11.4.1-3: update from releases/gcc-11-branch (RHEL-17638)
  - backport from 11.4.1-3: use -fno-stack-protector in some aarch64 tests


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-5
changelog:
  - backport from 11.5.0-5: rebuild for CVE-2020-11023 (RHEL-78377)
  - backport from 11.5.0-4: revert the PR middle-end/57245 patch (RHEL-76359)
  - backport from 11.5.0-3: honor -frounding-math in real truncation (PR middle-end/57245, RHEL-73749)


author: Robert Scheck <robert@fedoraproject.org> - 1.5.5-6
changelog:
  - Add upstream patch for microphone input to fix flag comparison
    in "guac_rwlock_acquire_write_lock" function (GUACAMOLE-1940)


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 1.3.3-9
changelog:
  - Add patch that drops Tcl 8.5 and adds Tcl 9.0 support (patch extracted from
    upstream commits)
  - Rebuilt for Tcl 9.0 (#2337734)


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#2344515)
  - Default syntaxdb points to Tcl 9.0 on Fedora>=42 and to Tcl 8.6 elsewhere


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.1.1-1
changelog:
  - Update to 9.1.1 (close RHBZ#2276572)
  - Replace downstream man page with upstream generated man page


author: Pavel Raiskup <praiskup@redhat.com> 1.22-1
changelog:
  - ajust to the current/future DNF packaging
  - fix for new DNF that doesn't accept %location in --queryformat


author: Pavel Raiskup <praiskup@redhat.com> 1.23-2
changelog:
  - using a temporary DNF cache directory, Koji FTBFS and https://github.com/fedora-copr/copr/issues/2756


author: Pavel Raiskup <praiskup@redhat.com> 1.25-1
changelog:
  - PruneRepoAnalyzer to use the temporary cachedir, too
  - Read BUILDTIME from the repo metadata, rather than every single RPM file


author: Pavel Raiskup <praiskup@redhat.com> 1.26-1
changelog:
  - dnf5 compat: Use file:// in baseurls explicitly
  - pair_srpm_rpm: migrate to DNF5, keep DNF4 backward compat
  - pair_srpm_rpm: use a correct specifier for logging strings


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-2
changelog:
  - Adjust stressGraphics.ref
  - Build for EPEL 10
  - Disable the R interface for EPEL 10 (R not yet abailable)
  - Enable uring support for EPEL 9 (supported in kernel since RHEL 9.3)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-3
changelog:
  - Don't add dependencies on root-roofit-multiprocess and root-roofit-zmq
    to root-roofit-core for EPEL builds


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-5
changelog:
  - Apply patches to fix build with gcc 15
  - Enable roofit-multiprocess for EPEL 10 (dependencies available)
  - Rebuild for pythia8 8.3.13


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Fix Source URL (frostyx@email.cz)
  - Unify descriptions and mention querying bodhi (frostyx@email.cz)
  - Link fedfind project (frostyx@email.cz)
  - make repository REUSE compliant (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.13-1
changelog:
  - _get_default_domain_conf polishing (lbrabec)
  - fixing typing errors (lbrabec)
  - add host_device_path to StorageDevice (lbrabec)
  - Allow skipping downloads
  - Adjust verification around image resolve caching
  - Fedora image finder: look for subvariant instead of variant
  - cli: Identify rhcos as coreos too
  - cli: Refactor url checking a bit
  - Band aid tests fixup
  - cli: Add dry option
  - Fix the issue of indentation for the docs of --virtiofs (hhan)
  - image: Use reflinks if available (walters)
  - add virtual iommu device (hhan)
  - Workarounds API (lbrabec, fzatlouk)
  - CentOS 7: Workaround to point repositories to the vault
  - CentOS Stream: Support preliminary CentOS Stream 10 images
  - Refresh baked in fallback image urls
  - Ubuntu: Fixup image finder
  - Debian: Support bookworm release
  - Purge domain-template.jinja


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241009git669c882-1
changelog:
  - Update to 0^20241009git669c882
  - Add `PyUnicode_Equal()` function
  - Add `PyBytes_Join()` function
  - Add `Py_HashBuffer()` function
  - Add `PyIter_NextItem()` function
  - Add `PyLong_FromUInt64()` and `PyLong_AsUInt64()`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241115git03e441d-1
changelog:
  - Update to 0^20241115git03e441d
  - Add `PyLong_IsPositive`/`Negative`/`Zero()` functions
  - Relax `PYPY_VERSION_NUM` requirements for hash macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250128gitc84545f-1
changelog:
  - Update to 0^20250128gitc84545f
  - Remove `PyConfig.use_system_logger`: it will only be available on Python
    3.13.2 which is not released yet.
  - Fix multiple definitions for `Py_fclose`
  - Avoid `Py_ARRAY_LENGTH()` (because it fails with C++ on Python 3.9 on
    macOS)
  - Improve `test_config`
  - Replace `extern` with `PyAPI_FUNC()`


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Robert Scheck <robert@fedoraproject.org> 2.05-27
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


