# changelog

author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.3-0.1.beta1
changelog:
  - Upgrade to 4.3 beta1.
  - Opus input plugin is new.
  - Pipewire output plugin is new.
  - Alarm plugin is gone.


author: Than Ngo <than@redhat.com> - 118.0.5993.70-1
changelog:
  - update to 118.0.5993.70
      - CVE-2023-5218: Use after free in Site Isolation.
      - CVE-2023-5487: Inappropriate implementation in Fullscreen.
      - CVE-2023-5484: Inappropriate implementation in Navigation.
      - CVE-2023-5475: Inappropriate implementation in DevTools.
      - CVE-2023-5483: Inappropriate implementation in Intents.
      - CVE-2023-5481: Inappropriate implementation in Downloads.
      - CVE-2023-5476: Use after free in Blink History.
      - CVE-2023-5474: Heap buffer overflow in PDF.
      - CVE-2023-5479: Inappropriate implementation in Extensions API.
      - CVE-2023-5485: Inappropriate implementation in Autofill.
      - CVE-2023-5478: Inappropriate implementation in Autofill.
      - CVE-2023-5477: Inappropriate implementation in Installer.
      - CVE-2023-5486: Inappropriate implementation in Input.
      - CVE-2023-5473: Use after free in Cast.


author: Than Ngo <than@redhat.com> - 119.0.6045.123-1
changelog:
  - update to 119.0.6045.123, include following security fixes:
    high CVE-2023-5996: Use after free in WebAudio


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.0-1
changelog:
  - New upstream release
  - Build with libxc support bug #2081873
  - Remove %{ix86} support due to openmpi bug #2142304


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.2-1
changelog:
  - New upstream release
  - Print outputs of failed tests https://github.com/nwchemgit/nwchem/issues/895


author: David Sommerseth <davids@openvpn.net> - 2.5.7-2
changelog:
  - Added additional upstream patch resolving BF-CBC issues (to be removed with 2.5.8)
    https://patchwork.openvpn.net/patch/2504/
  - Removed BF-CBC from the --data-ciphers list.  This is no longer available by default
    in OpenSSL 3.0


author: David Sommerseth <davids@openvpn.net> - 2.5.9-2
changelog:
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.0-1
changelog:
  - Add async API for parsing and verifying tokens
  - Add configuration API
  - Make nbf claim optional for non-scitokens tokens
  - Update to OpenSSL 3.0


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.2-1
changelog:
  - Add support for API-configurable cache home
  - Fix enforcer_acl_free logic
  - scitokens_internal: catch matching exception type after jwt-cpp update


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


