# changelog

author: Troy Dawson <tdawson@redhat.com> - 0.8.11-1
changelog:
  - determine_rhel_state: Fix missing phase check
  - Fix detection of releases in Maintenance Phase
  - Handle maintenance releases better


author: Troy Dawson <tdawson@redhat.com> - 0.8.13-1
changelog:
  - define centos in rpmdefines section
  - undefine fedora in rpmdefines section
  - resolves centpkg issue #111 and #112


author: Troy Dawson <tdawson@redhat.com> - 0.9.0-1
changelog:
  - Define compat shims for %patchN when building for EL <= 10
  - Get rid of SyntaxWarning: invalid escape sequence '\d'


author: Than Ngo <than@redhat.com> - 129.0.6668.70-1
changelog:
  - update to 129.0.6668.70
    * High CVE-2024-9120: Use after free in Dawn
    * High CVE-2024-9121: Inappropriate implementation in V8
    * High CVE-2024-9122: Type Confusion in V8
    * High CVE-2024-9123: Integer overflow in Skia


author: Than Ngo <than@redhat.com> - 129.0.6668.89-1
changelog:
  - update to 129.0.6668.89
    * High CVE -2024-7025: Integer overflow in Layout
    * High CVE-2024-9369: Insufficient data validation in Mojo
    * High CVE-2024-9370: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 129.0.6668.100-1
changelog:
  - update to 129.0.6668.100
    * CVE-2024-9602: Type Confusion in V8
    * CVE-2024-9603: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 130.0.6723.58-1
changelog:
  - update to 130.0.6723.58
    * High CVE-2024-9954: Use after free in AI
    * Medium CVE-2024-9955: Use after free in Web Authentication
    * Medium CVE-2024-9956: Inappropriate implementation in Web Authentication
    * Medium CVE-2024-9957: Use after free in UI
    * Medium CVE-2024-9958: Inappropriate implementation in PictureInPicture
    * Medium CVE-2024-9959: Use after free in DevTools
    * Medium CVE-2024-9960: Use after free in Dawn
    * Medium CVE-2024-9961: Use after free in Parcel Tracking
    * Medium CVE-2024-9962: Inappropriate implementation in Permissions
    * Medium CVE-2024-9963: Insufficient data validation in Downloads
    * Low CVE-2024-9964: Inappropriate implementation in Payments
    * Low CVE-2024-9965: Insufficient data validation in DevTools
    * Low CVE-2024-9966: Inappropriate implementation in Navigations


author: Than Ngo <than@redhat.com> - 130.0.6723.69-1
changelog:
  - Update to 130.0.6723.69
    * High CVE-2024-10229: Inappropriate implementation in Extensions
    * High CVE-2024-10230: Type Confusion in V8
    * High CVE-2024-10231: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 130.0.6723.91-1
changelog:
  - Update to 130.0.6723.91
    * Critical CVE-2024-10487: Out of bounds write in Dawn
    * High CVE-2024-10488: Use after free in WebRTC


author: Than Ngo <than@redhat.com> - 130.0.6723.116-1
changelog:
  - Update to 130.0.6723.116
    * High CVE-2024-10826: Use after free in Family Experience
    * High CVE-2024-10827: Use after free in Serial


author: Xavier Bachelot <xavier@bachelot.org> - 3.2.2-12
changelog:
  - Add patch7:
    - fix ldap anonymous bind
    - sync distro signatures
    - support older anaconda boot line options


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Paul Howarth <paul@city-fan.org> - 1.3.6d-1
changelog:
  - Update to 1.3.6d
    - Fixed issue with FTPS uploads of large files using TLSv1.3
      (https://github.com/proftpd/proftpd/issues/959)
    - Fixed regression in the handling of '%{env:...}' configuration variables
      when the environment variable is not present
      (https://github.com/proftpd/proftpd/issues/857)
    - Second LIST of the same symlink shows different results
      (https://github.com/proftpd/proftpd/issues/940)
    - mod_sftp sends broken response when CREATETIME attribute is requested
      (https://github.com/proftpd/proftpd/issues/980)
    - Handle zero-length SFTP WRITE requests without error
      (http://bugs.proftpd.org/show_bug.cgi?id=4398)
    - PidFile should not be world-writable
      (https://github.com/proftpd/proftpd/issues/1018)
    - TLSv1.3 handshake fails due to missing session ticket key on some systems
      (https://github.com/proftpd/proftpd/issues/1014)
    - Lowercased FTP commands not properly identified
      (https://github.com/proftpd/proftpd/issues/1023)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-1
changelog:
  - Update to 1.3.6e
    - Fixed null pointer dereference in mod_sftp when using SCP incorrectly
      (https://github.com/proftpd/proftpd/issues/1043)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-3
changelog:
  - Avoid segfaults with TLSv1.3
    https://github.com/proftpd/proftpd/issues/1063
    https://github.com/proftpd/proftpd/commit/adf43dd4ddaab0332e74abc86bbcef9cf27ee54a
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-4
changelog:
  - Fix memory disclosure to RADIUS servers by mod_radius (#2001690)
    https://github.com/proftpd/proftpd/issues/1284
    https://github.com/proftpd/proftpd/pull/1285


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-6
changelog:
  - Fix one-byte out-of-bounds read, and daemon crash, because of mishandling of
    quote/backslash semantics (#2255609, GH#1683, CVE-2023-51713)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-7
changelog:
  - Fix slow reading of passwd/group files in mod_auth_file (#2270686, GH#1134,
    GH#1192, GH#1195, GH#1213)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-8
changelog:
  - Add fix for slow accesses in large directory trees (rhbz#2310341)
    - http://bugs.proftpd.org/show_bug.cgi?id=4307
    - https://github.com/proftpd/proftpd/pull/525


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Packit <hello@packit.dev> - 0.28.3-1
changelog:
  - Fixed several minor issues such as processing seemingly commented-out macro definitions (e.g. `#%global prerel rc1`) and treating `SourceLicense` tag as a source. (#374, #376)
  - Made `EVR`, `NEVR` and `NEVRA` objects comparable. (#379)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.31.0-1
changelog:
  - Value of a `Tag` no longer includes trailing whitespace (if any). (#393)
  - specfile now tries to expand macros before processing conditions to be able to resolve conditional expressions defined by macros, for example OpenSUSE Tumbleweed defines `%ifpython3` macro as `%if "%{python_flavor}" == "python3"`. (#394)
  - Resolves: rhbz#2294393


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Jakub Kadlcik <frostyx@email.cz> 0.6.20-1
changelog:
  - Sync repo (in addition to tag) during mead build (nmoumoul@redhat.com)
  - Add 'Building RHEL packages with Tito' as external doc (frostyx@email.cz)
  - Consider the current project git config when releasing to DistGit
    (frostyx@email.cz)
  - Print the problematic binary files (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.21-1
changelog:
  - Properly catch TitoException (frostyx@email.cz)
  - Add documentation for the MockBuilder (frostyx@email.cz)
  - Allow to define mock chroot in tito.props (frostyx@email.cz)
  - Fix recursion error in MockBuilder (frostyx@email.cz)
  - DistGitReleasers: don't nuke external sources with fetch_sources (praiskup@redhat.com)
  - Add installation instructions from PyPI (frostyx@email.cz)
  - Add long_description to setup.py (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.22-1
changelog:
  - Fix python2 urlretrieve import (frostyx@email.cz)
  - Fixed submodule archives concatenation (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #414 (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #413 (jerzy.drozdz@jdsieci.pl)
  - Revert 45d431ad149cb33e2462a990c4c4f29e6bb2bb7e (nmoumoul@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.23-1
changelog:
  - Replace `submodule--helper list` with `git config --get-regexp`
  - do not overwrite packit.yaml and its variants (msuchy@redhat.com)
  - packit: fixing the Fedora build failures (praiskup@redhat.com)
  - Don't upload patches to the lookaside cache (frostyx@email.cz)
  - use spdx license (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.24-1
changelog:
  - Will now copy both source files and patch files declared in the spec
  - Fix UpstreamBuilder deprecation warning (#461) (frostyx@email.cz)
  - Fix the setup.py license according to tito.spec (#433) (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz>
changelog:
  - Use rpm.ds instead of deprecated hdr.dsFromHeader (frostyx@email.cz)
  - Support branch aliases in releasers (frostyx@email.cz)
  - Document how to automate bodhi updates (msuchy@redhat.com)
  - Use raw strings for regex patterns (frostyx@email.cz)
  - Allow tito build without .tito directory (frostyx@email.cz)
  - Unify README and index.md (msuchy@redhat.com)
  - Fix PEP8 issues found by runtests.py (frostyx@email.cz)
  - Replace egrep with grep -E (frostyx@email.cz)
  - Don't use --cacheonly on DNF5 (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.26-1
changelog:
  - Fix issue with missing version numbers in the changelog (frostyx@email.cz)
  - Tito wrapper for easier development (praiskup@redhat.com)


author: Jakub Kadlčík <frostyx@email.cz>
changelog:
  - Defer submodule detection to git
  - Many improvements to tests and they now run during package build
  - New config option `buildconfig.test_version_suffix`


author: Jered Floyd <jered@redhat.com> 9.2.4-2
changelog:
  - Enable build with deprecated OpenSSL Engine
    https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine


