# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Than Ngo <than@redhat.com> - 126.0.6478.182-1
changelog:
  - update to 126.0.6478.182
    * High CVE-2024-6772: Inappropriate implementation in V8
    * High CVE-2024-6773: Type Confusion in V8
    * High CVE-2024-6774: Use after free in Screen Capture
    * High CVE-2024-6775: Use after free in Media Stream
    * High CVE-2024-6776: Use after free in Audio
    * High CVE-2024-6777: Use after free in Navigation
    * High CVE-2024-6778: Race in DevTools
    * High CVE-2024-6779: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 127.0.6533.72-1
changelog:
  - update to 127.0.6533.72
  	* CVE-2024-6988: Use after free in Downloads
  	* CVE-2024-6989: Use after free in Loader
  	* CVE-2024-6991: Use after free in Dawn
  	* CVE-2024-6992: Out of bounds memory access in ANGLE
  	* CVE-2024-6993: Inappropriate implementation in Canvas
  	* CVE-2024-6994: Heap buffer overflow in Layout
  	* CVE-2024-6995: Inappropriate implementation in Fullscreen
  	* CVE-2024-6996: Race in Frames
  	* CVE-2024-6997: Use after free in Tabs
  	* CVE-2024-6998: Use after free in User Education
  	* CVE-2024-6999: Inappropriate implementation in FedCM
  	* CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  	* CVE-2024-7001: Inappropriate implementation in HTML
  	* CVE-2024-7003: Inappropriate implementation in FedCM
  	* CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing
  	* CVE-2024-7005: Insufficient validation of untrusted input in Safe


author: Than Ngo <than@redhat.com> - 127.0.6533.88-2
changelog:
  - remove old patch that seems to be the cause of a crash
    when the user set user.max_user_namespaces to 0


author: Than Ngo <than@redhat.com> - 127.0.6533.88-3
changelog:
  - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
  - add ppc64le patch to fix runtime assertion trap on ppc64el systems
  - refresh ppc64le patch to work around broken 64k allocator code on arm64


author: Than Ngo <than@redhat.com> - 127.0.6533.99-1
changelog:
  - update to 127.0.6533.99
    * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
    * High CVE-2024-7533: Use after free in Sharing
    * High CVE-2024-7550: Type Confusion in V8
    * High CVE-2024-7534: Heap buffer overflow in Layout
    * High CVE-2024-7535: Inappropriate implementation in V8
    * High CVE-2024-7536: Use after free in WebAudio


author: Than Ngo <than@redhat.com> - 128.0.6613.119-1
changelog:
  - update to 128.0.6613.119
    * High CVE-2024-8362: Use after free in WebAudio
    * High CVE-2024-7970: Out of bounds write in V8


author: Than Ngo <than@redhat.com> - 128.0.6613.137-1
changelog:
  - update to 128.0.6613.137
    * High CVE-2024-8636: Heap buffer overflow in Skia
    * High CVE-2024-8637: Use after free in Media Router
    * High CVE-2024-8638: Type Confusion in V8
    * High CVE-2024-8639: Use after free in Autofill


author: Miroslav Suchý <msuchy@redhat.com> 1.47-1
changelog:
  - add GPL-2.0-or-later WITH RRDtool-FLOSS-exception-2.0
  - add text of ultrapermissive dedication from sublimehq
  - add HPND-export2-US license
  - add Gutmann license
  - add HPND-merchantability-variant license
  - fix case in license id of BSD-2-Clause-first-lines
  - add HPND-export-US-acknowledgement license
  - add HPND-Intel license
  - add loguru public domain dedication
  - add BSD-3-Clause WITH AdditionRef-OpenEXR-Additional-IP-Rights-Grant
  - add HPND-sell-variant-MIT-disclaimer-rev license
  - add GD license
  - Add crc32 license found in libsurvive to UltraPermissive
  - allow lower case variant
  - add any-OSI license
  - document dotnet* packages as exception for LicenseRef-ISO-8879


author: Miroslav Suchý <msuchy@redhat.com> 1.50-1
changelog:
  - include scancode-license-policy.yaml in rpm
  - add BSD-3-Clause-No-Nuclear-Warranty license
  - add unicode-mappiing license as not-allowed
  - add LicenseRef-W3C-Document-2023
  - add W3C-20150513 license
  - add 'make scancode' that produces scancode license policy file
  - Add LicenseRef-framed as allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.52-1
changelog:
  - Add LicenseRef-Frontier-Artistic-1.0 as not-allowed
  - Add LicenseRef-JasPer-1.0 as not-allowed
  - Create missing TOML for Callaway Nmap but reclassify as not-allowed, with
    usage exception
  - Add LicenseRef-NPSL-0.92 as not-allowed, corresponding to Callaway-era NPSL
  - Add LicenseRef-NPSL-0.93 as not-allowed to cover NPSL 0.93 and 0.94
  - Correct TOML files for LicenseRef-NPSL-0.94 and LicenseRef-NPSL-0.95
  - Add LicenseRef-NPSL-0.95 as not-allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Christoph Erhardt <fedora@sicherha.de> - 2.8.3-11
changelog:
  - Review SPDX license identifier; `MIT` is correct
  - Make summary and description of `fonts` subpackage more precise (rhbz#2232553)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.8-1
changelog:
  - Update to version 5.6.8
  - Disable tests that require file attributes if the file system doesn't
    support them


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.9-2
changelog:
  - Reduce socket path lengths used by tests for rpm 4.20 compatibility
  - Avoid test failures due to using the same port numbers in different tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-1
changelog:
  - Update to version 5.7.0
  - Drop patches accepted upstream
  - Drop EPEL 7 support from spec file (EOL)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-2
changelog:
  - Fix compilation error due to hidden overloaded virtual
  - Make documentation package not noarch due to non-reproducible filenames


author: David Cantrell <dcantrell@redhat.com> - 1.3-1
changelog:
  - Small change to the way Koji builds are submitted
  - Ignore build/ in .gitignore
  - Update fedora.yaml from generic.yaml, disable 'patches' inspection
  - Eliminate duplicate entries in licenses/fedora.json
  - Simplify test() definition in meson.build


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Increment the development tree version to 1.4.
  - Document the release process and add another helper target to the
    Makefile
  - 'make koji' skips branches that lack Koji build targets
  - Set VENDORBLD to the vendor build too in submit-koji-builds.sh
  - Add NPSL
  - Update fedora.yaml for the new 'badfuncs' inspection.
  - The badfuncs inspection is in rpminspect >= 1.3, update spec file
  - Add MIT-0 license
  - Add runpath section to fedora.yaml


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Add a 'rawhide' profile to disable a lot of inspections
  - Add missing ID value to the npsl license entry
  - /usr/lib/dracut and /usr/lib/udev are valid paths
  - Update fedora.yaml with all current configuration file changes
  - Explain size_threshold can be 'info'


