# changelog

author: José Matos <jamatos@fedoraproject.org> - 10.6.0-1
changelog:
  - update to 10.6.0
  - BR flexiblas for Fedora and lapack, openblas and atlas for EPEL
  - adapt armadillo-devel accordingly


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Than Ngo <than@redhat.com> - 120.0.6099.199-1
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
     * CVE-2024-0222: Use after free in ANGLE
     * CVE-2024-0223: Heap buffer overflow in ANGLE
     * CVE-2024-0224: Use after free in WebAudio
     * CVE-2024-0225: Use after free in WebGPU


author: Jos de Kloe <josdekloe@gmail.com> - 2.29.0-1
changelog:
  - Upgrade to upstream version 2.29.0
    Note that the source code now uses g++ in stead of gcc for compilation.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1
changelog:
  - New version
    Resolves: rhbz#2241735
    Resolves: rhbz#2241538
    Resolves: rhbz#2241540
    Resolves: rhbz#2241525
    Resolves: rhbz#2241526
    Resolves: rhbz#2241528
    Resolves: rhbz#2241530
    Resolves: rhbz#2241531
    Resolves: rhbz#2241533
    Resolves: rhbz#2241542
    Resolves: rhbz#2241543


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1
changelog:
  - New version
    Resolves: rhbz#2256145
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51766


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - open https://jira.mongodb.org/browse/MONGOCRYPT-451 build with shared libbson
  - open https://jira.mongodb.org/browse/MONGOCRYPT-460 ABI/API breakage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.80-1
changelog:
  - New version
    Resolves: rhbz#2255025
  - Fixed Terrapin vulnerability in some SSH protocol extensions
    Resolves: CVE-2023-48795


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.15-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.15.
  - Added a dependency on make, as per current packaging guidelines.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.16-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.16.
  - Added an AppStream-conforming metadata file.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.18-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.18.
  - Added verification of upstream signature.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.19-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.19.
  - Update rules for AppStream metainfo and desktop files.


author: Orion Poplawski <orion@nwra.com> - 6.0.13-1
changelog:
  - Update to 6.0.13
  - Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
  - Add policy to allow zabbix agent to run rpm read-only
  - Fix up alternatives scripts to allow better upgrades from other zabbix packages


