# changelog

author: Than Ngo <than@redhat.com> - 131.0.6778.139-1
changelog:
  - Update to 131.0.6778.139
    * High CVE-2024-12381: Type Confusion in V8
    * High CVE-2024-12382: Use after free in Translate


author: Than Ngo <than@redhat.com> - 131.0.6778.204-1
changelog:
  - Update to 131.0.6778.204
    * High CVE-2024-12692: Type Confusion in V8
    * High CVE-2024-12693: Out of bounds memory access in V8
    * High CVE-2024-12694: Use after free in Compositing
    * High CVE-2024-12695: Out of bounds write in V8


author: Than Ngo <than@redhat.com> - 132.0.6834.83-1
changelog:
  - Update to 132.0.6834.83
    * High CVE-2025-0434: Out of bounds memory access in V8
    * High CVE-2025-0435: Inappropriate implementation in Navigation
    * High CVE-2025-0436: Integer overflow in Skia
    * High CVE-2025-0437: Out of bounds read in Metrics
    * High CVE-2025-0438: Stack buffer overflow in Tracing
    * Medium CVE-2025-0439: Race in Frames
    * Medium CVE-2025-0440: Inappropriate implementation in Fullscreen
    * Medium CVE-2025-0441: Inappropriate implementation in Fenced
    * Medium CVE-2025-0442: Inappropriate implementation in Payments
    * Medium CVE-2025-0443: Insufficient data validation in Extensions
    * Low CVE-2025-0446: Inappropriate implementation in Extensions
    * Low CVE-2025-0447: Inappropriate implementation in Navigation
    * Low CVE-2025-0448: Inappropriate implementation in Compositing


author: Than Ngo <than@redhat.com> - 132.0.6834.110-1
changelog:
  - Update to 132.0.6834.110
    * High CVE-2025-0611: Object corruption in V8
    * High CVE-2025-0612: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 133.0.6943.53-1
changelog:
  - Update to 133.0.6943.53
    * CVE-2025-0444: Use after free in Skia
    * CVE-2025-0445: Use after free in V8
    * CVE-2025-0451: Inappropriate implementation in Extensions API


author: Than Ngo <than@redhat.com> - 133.0.6943.98-1
changelog:
  - Update to 133.0.6943.98
    * CVE-2025-0995: Use after free in V8
    * CVE-2025-0996: Inappropriate implementation in Browser UI
    * CVE-2025-0997: Use after free in Navigation
    * CVE-2025-0998: Out of bounds memory access in V8


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.7-4
changelog:
  - Rebuild for gsoap 2.8.135 (Fedora 42)
  - Drop EPEL 7 specific instructions (EOL)
  - Update License tag


author: Mihai Patrascoiu <mihai.patrascoiu@cern.ch> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Align specfile with upstream (including whitespace from tabs to spaces)


author: Miroslav Suchý <msuchy@redhat.com> 1.102-1
changelog:
  - update copr keys
  - Create cathugger.asc
  - Create zzz.key.asc
  - Create idk.key.asc
  - Create hulahoop.asc
  - Create adrelanos.asc
  - Create makemkv_pub.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.103-1
changelog:
  - update copr keys
  - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys
  - Add CentOS 10 and EPEL 10 GPG keys
  - add Alpine Linux and postmarketOS keys


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 1.3.3-9
changelog:
  - Add patch that drops Tcl 8.5 and adds Tcl 9.0 support (patch extracted from
    upstream commits)
  - Rebuilt for Tcl 9.0 (#2337734)


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#2344515)
  - Default syntaxdb points to Tcl 9.0 on Fedora>=42 and to Tcl 8.6 elsewhere


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-3
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866


author: Packit <hello@packit.dev> - 0.47.0-1
changelog:
  - Added support for removing users/groups from a project and possibility to check for groups with permissions to modify a PR. (#815)
  - Resolves rhbz#2125279


author: Packit <hello@packit.dev> - 0.47.1-1
changelog:
  - Fixed an issue where getting a list of GitLab merge requests using `.list()` would return only 20 items. (#819)
  - Resolves rhbz#2246994


author: Packit <hello@packit.dev> - 0.48.0-1
changelog:
  - There is a new get_pr_files_diff method supported for Pagure. (#826)
  - We have fixed a bug that GithubRelease.url returned an API URL. (#824)
  - Resolves rhbz#2255524


author: Packit <hello@packit.dev> - 0.49.0-1
changelog:
  - For Pagure there are 2 new methods available: one for getting users with specified access rights and one for getting members of a group. (#834)


author: Packit <hello@packit.dev> - 0.50.0-1
changelog:
  - A new` get_commits` method was implemented for GitHub and Gitlab projects. (#857)
  - An issue with silently ignoring error (#760) was fixed. (#855)
  - Resolves: rhbz#2312527


author: Packit <hello@packit.dev> - 0.50.1-1
changelog:
  - We have fixed an issue that caused inconsistencies with the expected behavior stated by the documentation when adding duplicate reactions to GitLab comments. (#861)
  - Resolves: rhbz#2318010


author: Packit <hello@packit.dev> - 0.50.2-1
changelog:
  - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865)
  - Resolves: rhbz#2321974


author: Packit <hello@packit.dev> - 0.50.3-1
changelog:
  - We have improved wrapping of the forge-specific exceptions, string representation of the original exception is now included. (#884)
  - The test suite for parsing git URLs has been extended and also the handling of GitHub repository with changed owner or name has been improved. (#874)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - There is a new convenience method `Sections.get_or_create()` that allows you to manipulate a section
    without checking if it exists first. If a section doesn't exist, it will be appended to the end. (#441)
    For example, this will work properly even on spec files without `%changelog`:

    ```
    with spec.sections() as sections:
        changelog = sections.get_or_create("changelog")
        changelog[:] = ["%autochangelog"]
    ```
  - Resolves: rhbz#2332288


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-2
changelog:
  - Adjust stressGraphics.ref
  - Build for EPEL 10
  - Disable the R interface for EPEL 10 (R not yet abailable)
  - Enable uring support for EPEL 9 (supported in kernel since RHEL 9.3)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-3
changelog:
  - Don't add dependencies on root-roofit-multiprocess and root-roofit-zmq
    to root-roofit-core for EPEL builds


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.34.02-5
changelog:
  - Apply patches to fix build with gcc 15
  - Enable roofit-multiprocess for EPEL 10 (dependencies available)
  - Rebuild for pythia8 8.3.13


