# changelog

author: Sérgio Basto <sergio@serjux.com> - 1.31-1
changelog:
  - Update fakeroot to 1.31 (#2167522)
  - Add fix from Debian
  - Drop fakeroot-inttypes.patch which had almost 10 year old and I dont know what his purpose
  - Drop relax_tartest.patch we don't need it anymore


author: Tom Prince - 0.8.1-1
changelog:
  - Update to 0.8.1.  This update adds pinning of LastPass public keys, in
    preparation for certificate changes at lastpass.com. Upgrade will be needed
    to avoid "Peer certificate cannot be authenticated with given CA
    certificates" errors when the cert changes are made.


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.3.1-1
changelog:
  - Update to version 1.3.1
  - Add fish and zsh completions
  - Fix #1583717, #1579473, #1459717
  - Thanks to Ventz Petkov and Edward J. Huff for their contribution


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - open https://jira.mongodb.org/browse/MONGOCRYPT-451 build with shared libbson
  - open https://jira.mongodb.org/browse/MONGOCRYPT-460 ABI/API breakage


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Paul Howarth <paul@city-fan.org> - 1.9.0-5
changelog:
  - Switch to https:// upstream URLs
  - Full groff (not just groff-base) needed for the mansyntax check


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.00-1
changelog:
  - Update to 6.28.00
  - ROOT now uses llvm/clang version 13 (updated from version 9)
  - Clean up specfile by removing EPEL 7 conditionals
  - Drop dataframe, roofit and tmva-sofieparser on EPEL 8 ppc64le due to
    "pure virtual method called" errors
  - Split the root-geom sub-package into three separate sub-packages:
    root-geom, root-geom-builder and root-geom-painter
  - Enable uring support in EPEL 9 (liburing now available)
  - New sub-packages: root-geom-webviewer, root-roofit-jsoninterface,
    root-testsupport, root-tree-ntuple-utils, root-tree-webviewer, root-xroofit
  - Dropped patches: 31
  - New patches: 17
  - Updated patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.04-1
changelog:
  - Update to 6.28.04
  - Drop patch root-RF-Rewrite-RooProdPdf.TestGetPartIntList-unit-test.patch
    (previously backported)
  - Enable Apache Arrow support (64 bit architectures only)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.04-3
changelog:
  - Fix build on Fedora 39+ where glibc has strlcpy and strlcat
  - Enable build of root-gui-qt6webdisplay sub-package if Qt6 is available


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.06-1
changelog:
  - Update to 6.28.06
  - Drop patches root-testRooAbsL-test-compares-two-doubles-and-fails.patch and
    root-strlcpy.patch (fixed upstream)


