# changelog

author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Than Ngo <than@redhat.com> - 120.0.6099.199-1
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
     * CVE-2024-0222: Use after free in ANGLE
     * CVE-2024-0223: Heap buffer overflow in ANGLE
     * CVE-2024-0224: Use after free in WebAudio
     * CVE-2024-0225: Use after free in WebGPU


author: Than Ngo <than@redhat.com> - 120.0.6099.224-1
changelog:
  - update to 120.0.6099.224
    * High CVE-2024-0517: Out of bounds write in V8
    * High CVE-2024-0518: Type Confusion in V8
    * High CVE-2024-0519: Out of bounds memory access in V8


author: Jiri Kastner - 8.2.1-7
changelog:
  - removed old systemd snippets and dependencies (BZ#850068)
  - changed dependency on openssl to compat-openssl10 for newer fedoras (BZ#1423307)
  - removed tcp_wrappers dependency (BZ#1518757)


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Christoph Erhardt <fedora@sicherha.de> - 2.0.0-1
changelog:
  - Bump version to 2.0.0
  - Change license from AGPL-3.0-or-later to MIT
  - Update version number of bundled tbb package to 2021.9
  - Remove `ExcludeArch` as mold now supports MIPS64


author: Christoph Erhardt <fedora@sicherha.de> - 2.4.0-2
changelog:
  - Don't build-require files outside of permitted directories
  - Drop upstreamed tbb patch
  - Build against system-provided tbb where available
  - Update version number of bundled tbb package to 2021.10
  - Skip broken unit tests on s390x


author: Radu Rendec <radu@rendec.net> - 0.1-4
changelog:
  - Update license tag to use SPDX identifiers
  - Use the newer autosetup macro
  - Do not call the 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS macro explicitly


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.1-1
changelog:
  - Update to version 5.6.1
  - Add --use-pep517 --no-build-isolation to pip options for Fedora and EPEL 9+


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


