# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Than Ngo <than@redhat.com> - 122.0.6261.57-1
changelog:
  - update to 122.0.6261.57
     * High CVE-2024-1669: Out of bounds memory access in Blink
     * High CVE-2024-1670: Use after free in Mojo
     * Medium CVE-2024-1671: Inappropriate implementation in Site Isolation
     * Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy
     * Medium CVE-2024-1673: Use after free in Accessibility
     * Medium CVE-2024-1674: Inappropriate implementation in Navigation
     * Medium CVE-2024-1675: Insufficient policy enforcement in Download
     * Low CVE-2024-1676: Inappropriate implementation in Navigation.


author: Than Ngo <than@redhat.com> - 122.0.6261.69-1
changelog:
  - update to 122.0.6261.69
  - fix build error on el8
  - bz#2265039, built with -fwrapv for improved memory safety
  - bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability


author: Than Ngo <than@redhat.com> - 122.0.6261.94-1
changelog:
  - upstream security release 122.0.6261.94
    * High : Type Confusion in V8
  - fixed bz#2265957, added correct platform in chromium use agent


author: Than Ngo <than@redhat.com> - 122.0.6261.111-1
changelog:
  - upstream security release 122.0.6261.111
     * High CVE-2024-2173: Out of bounds memory access in V8 
     * High CVE-2024-2174: Inappropriate implementation in V8
     * High CVE-2024-2176: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 122.0.6261.128-1
changelog:
  - upstream security release 122.0.6261.128
     * High CVE-2024-2400: Use after free in Performance Manager


author: Than Ngo <than@redhat.com> - 123.0.6312.58-1
changelog:
  - update to 123.0.6312.58
     * High CVE-2024-2625: Object lifecycle issue in V8
     * Medium CVE-2024-2626: Out of bounds read in Swiftshader
     * Medium CVE-2024-2627: Use after free in Canvas
     * Medium CVE-2024-2628: Inappropriate implementation in Downloads
     * Medium CVE-2024-2629: Incorrect security UI in iOS
     * Medium CVE-2024-2630: Inappropriate implementation in iOS
     * Low CVE-2024-2631: Inappropriate implementation in iOS


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.18-27
changelog:
  - Fully patch obsolete FSF postal address in license text
  - Since upstream merged the PR for this, we now patch the license text file


author: Lukas Javorsky <ljavorsk@redhat.com> - 2.7.6-5
changelog:
  - Rebuilt for minizip-ng transition Fedora change
  - Fedora Change: https://fedoraproject.org/wiki/Changes/MinizipNGTransition


author: Kevin Fenzi <kevin@scrye.com> - 1.34.0-2
changelog:
  - Carry scm policy plugin for hub, it's already upstream
  - Use dnf5 compatible 'group install' command
  - Allow specifying with a tag value what arches noarch builds happen on.
  - Fix image-build to not pass units to oz (to avoid GB/GiB issues)
  - Fix a typo in scheduler (already upstreamed)
  - Add back index for rpminfo table that was mistakenly dropped.


author: Paul Howarth <paul@city-fan.org> - 1.3.6c-2
changelog:
  - Retain a memory pool after an aborted transfer so that the %{transfer-status}
    LogFormat functionality still works
  - Own directory %{_sysconfdir}/logrotate.d


author: Paul Howarth <paul@city-fan.org> - 1.3.6c-3
changelog:
  - Avoid duplicate hostname and timestamps in syslog (#1808989)
    http://bugs.proftpd.org/show_bug.cgi?id=4185
    https://github.com/proftpd/proftpd/issues/1002
    https://github.com/proftpd/proftpd/pull/1009


author: Paul Howarth <paul@city-fan.org> - 1.3.6d-1
changelog:
  - Update to 1.3.6d
    - Fixed issue with FTPS uploads of large files using TLSv1.3
      (https://github.com/proftpd/proftpd/issues/959)
    - Fixed regression in the handling of '%{env:...}' configuration variables
      when the environment variable is not present
      (https://github.com/proftpd/proftpd/issues/857)
    - Second LIST of the same symlink shows different results
      (https://github.com/proftpd/proftpd/issues/940)
    - mod_sftp sends broken response when CREATETIME attribute is requested
      (https://github.com/proftpd/proftpd/issues/980)
    - Handle zero-length SFTP WRITE requests without error
      (http://bugs.proftpd.org/show_bug.cgi?id=4398)
    - PidFile should not be world-writable
      (https://github.com/proftpd/proftpd/issues/1018)
    - TLSv1.3 handshake fails due to missing session ticket key on some systems
      (https://github.com/proftpd/proftpd/issues/1014)
    - Lowercased FTP commands not properly identified
      (https://github.com/proftpd/proftpd/issues/1023)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-1
changelog:
  - Update to 1.3.6e
    - Fixed null pointer dereference in mod_sftp when using SCP incorrectly
      (https://github.com/proftpd/proftpd/issues/1043)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-3
changelog:
  - Avoid segfaults with TLSv1.3
    https://github.com/proftpd/proftpd/issues/1063
    https://github.com/proftpd/proftpd/commit/adf43dd4ddaab0332e74abc86bbcef9cf27ee54a
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-4
changelog:
  - Fix memory disclosure to RADIUS servers by mod_radius (#2001690)
    https://github.com/proftpd/proftpd/issues/1284
    https://github.com/proftpd/proftpd/pull/1285


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-6
changelog:
  - Fix one-byte out-of-bounds read, and daemon crash, because of mishandling of
    quote/backslash semantics (#2255609, GH#1683, CVE-2023-51713)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-7
changelog:
  - Fix slow reading of passwd/group files in mod_auth_file (#2270686, GH#1134,
    GH#1192, GH#1195, GH#1213)


author: Scott K Logan <logans@cottsay.net> - 0.2.1-2
changelog:
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-3
changelog:
  - Use "standardsymbolsps" instead of "symbol" when searching for the
    Symbols font in order to not find Noto Symbols instead


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-8
changelog:
  - Exclude failing gtest-math-matrix-test-testMatrixTSparse on Fedora 40
    (aarch64, ppc64le and s390x)


author: Mattias Ellert <ellert@ellert.se> - 6.30.04-1
changelog:
  - Update to 6.30.04
  - Drop patch root-adjust-test-for-failures-on-aarch64-ppc64le-s390x.patch
    (accepted upstrem)
  - Exclude failing TClingDataMemberInfo.Offset test on s390x


author: Julio González Gil <packages@juliogonzalez.es> - 1.91-1
changelog:
  - Update to 1.91 from https://github.com/s3fs-fuse/s3fs-fuse (#2061848)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.91


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Dmitry Butskoy <Dmitry@Butskoy.name> 2.53.17-1
changelog:
  - update to 2.53.17
  - enable webcomponents and pointer-events (upcoming upstream changes)
  - send origin header (for same-origin only) to satisfy client checking sites
  - backport fixes for mozbz 1502801 and mozbz 1502802
  - fix mozbz 1406821 to avoid extra debug output
  - add support for ffmpeg-6.0
  - no more needed python2.7 for build
  - drop obsoleted gconf2 support


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


