# changelog

author: Sérgio M. Basto <sergio@serjux.com> - 2.7.11-1
changelog:
  - Release 2.7.11 (Julian Andres Klode)
  - Show a separate list of upgrades deferred due to phasing (Julian Andres Klode)
  - Add the ?security pattern (Julian Andres Klode)
  - Add a new ?phasing pattern (Julian Andres Klode)
  - Add public phased update API (Julian Andres Klode)
  - For phasing, check if current version is a security update, not just previous ones (Julian Andres Klode)
  - Support -a for setting host architecture in apt-get source -b (David Kalnischkies)
  - Remove erroneous -a flag from apt-get synopsis in manpage (David Kalnischkies)


author: Packit <hello@packit.dev> - 2.7.12-1
changelog:
  - Release 2.7.12 (Julian Andres Klode)
  - Move systemd units to /usr/lib (Julian Andres Klode)
  - test-snapshot: Add test case for automatic snapshot (Julian Andres Klode)
  - test-snapshot: Fix a test case (Julian Andres Klode)
  - Delete SHADOWED metaIndex if we don't actually use snapshots (Julian Andres Klode)
  - Automatically enable snapshots where supported (Julian Andres Klode)
  - Modernize standard library includes (Julian Andres Klode)
  - Bump Ubuntu apt-key deprecation notice to 24.04 (Julian Andres Klode)


author: Packit <hello@packit.dev> - 2.7.14-1
changelog:
  - Release 2.7.14 (Julian Andres Klode)
  - Add an artificial Conflicts: against libnettle8 (Steve Langasek)
  - Revert "debrecords: Do not reparse if given same location" (Julian Andres Klode)
  - debrecords: Do not reparse if given same location (Julian Andres Klode)
  - pkgTagFile::Jump: Use lookback buffer to rejump to current position (Julian Andres Klode)
  - s#http://bugs.debian.org/src/#https://bugs.debian.org/src# (Wesley Schwengle)
  - Update VCG tool URI to new location (Wesley Schwengle)
  - Update Graphviz URL to https://graphviz.org/ (Wesley Schwengle)
  - Include Dutch translation for apt/apt-get upgrade documenation update (Wesley Schwengle)
  - Update documentation for apt upgrade with pkg arg (Wesley Schwengle)
  - Update documentation for apt-get upgrade with pkg arg (Wesley Schwengle)
  - Dutch manpages translation update (Frans Spiesschaert)
  - Dutch program translation update (Frans Spiesschaert)
  - Parse unsupported != relation in dependencies (David Kalnischkies)
  - Remove non-existent Debug::BuildDeps from apt.conf(5) (David Kalnischkies)
  - Handle EINTR in the static FileFd::Write overload (David Kalnischkies)
  - Support building without gnutls (Steve Langasek)
  - Resolves rhbz#2270952


author: Than Ngo <than@redhat.com> - 126.0.6478.182-1
changelog:
  - update to 126.0.6478.182
    * High CVE-2024-6772: Inappropriate implementation in V8
    * High CVE-2024-6773: Type Confusion in V8
    * High CVE-2024-6774: Use after free in Screen Capture
    * High CVE-2024-6775: Use after free in Media Stream
    * High CVE-2024-6776: Use after free in Audio
    * High CVE-2024-6777: Use after free in Navigation
    * High CVE-2024-6778: Race in DevTools
    * High CVE-2024-6779: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 127.0.6533.72-1
changelog:
  - update to 127.0.6533.72
  	* CVE-2024-6988: Use after free in Downloads
  	* CVE-2024-6989: Use after free in Loader
  	* CVE-2024-6991: Use after free in Dawn
  	* CVE-2024-6992: Out of bounds memory access in ANGLE
  	* CVE-2024-6993: Inappropriate implementation in Canvas
  	* CVE-2024-6994: Heap buffer overflow in Layout
  	* CVE-2024-6995: Inappropriate implementation in Fullscreen
  	* CVE-2024-6996: Race in Frames
  	* CVE-2024-6997: Use after free in Tabs
  	* CVE-2024-6998: Use after free in User Education
  	* CVE-2024-6999: Inappropriate implementation in FedCM
  	* CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  	* CVE-2024-7001: Inappropriate implementation in HTML
  	* CVE-2024-7003: Inappropriate implementation in FedCM
  	* CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing
  	* CVE-2024-7005: Insufficient validation of untrusted input in Safe


author: Than Ngo <than@redhat.com> - 127.0.6533.88-2
changelog:
  - remove old patch that seems to be the cause of a crash
    when the user set user.max_user_namespaces to 0


author: Than Ngo <than@redhat.com> - 127.0.6533.88-3
changelog:
  - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
  - add ppc64le patch to fix runtime assertion trap on ppc64el systems
  - refresh ppc64le patch to work around broken 64k allocator code on arm64


author: Than Ngo <than@redhat.com> - 127.0.6533.99-1
changelog:
  - update to 127.0.6533.99
    * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
    * High CVE-2024-7533: Use after free in Sharing
    * High CVE-2024-7550: Type Confusion in V8
    * High CVE-2024-7534: Heap buffer overflow in Layout
    * High CVE-2024-7535: Inappropriate implementation in V8
    * High CVE-2024-7536: Use after free in WebAudio


author: Than Ngo <than@redhat.com> - 128.0.6613.119-1
changelog:
  - update to 128.0.6613.119
    * High CVE-2024-8362: Use after free in WebAudio
    * High CVE-2024-7970: Out of bounds write in V8


author: Than Ngo <than@redhat.com> - 128.0.6613.137-1
changelog:
  - update to 128.0.6613.137
    * High CVE-2024-8636: Heap buffer overflow in Skia
    * High CVE-2024-8637: Use after free in Media Router
    * High CVE-2024-8638: Type Confusion in V8
    * High CVE-2024-8639: Use after free in Autofill


author: Miroslav Suchý <msuchy@redhat.com> 1.47-1
changelog:
  - add GPL-2.0-or-later WITH RRDtool-FLOSS-exception-2.0
  - add text of ultrapermissive dedication from sublimehq
  - add HPND-export2-US license
  - add Gutmann license
  - add HPND-merchantability-variant license
  - fix case in license id of BSD-2-Clause-first-lines
  - add HPND-export-US-acknowledgement license
  - add HPND-Intel license
  - add loguru public domain dedication
  - add BSD-3-Clause WITH AdditionRef-OpenEXR-Additional-IP-Rights-Grant
  - add HPND-sell-variant-MIT-disclaimer-rev license
  - add GD license
  - Add crc32 license found in libsurvive to UltraPermissive
  - allow lower case variant
  - add any-OSI license
  - document dotnet* packages as exception for LicenseRef-ISO-8879


author: Miroslav Suchý <msuchy@redhat.com> 1.50-1
changelog:
  - include scancode-license-policy.yaml in rpm
  - add BSD-3-Clause-No-Nuclear-Warranty license
  - add unicode-mappiing license as not-allowed
  - add LicenseRef-W3C-Document-2023
  - add W3C-20150513 license
  - add 'make scancode' that produces scancode license policy file
  - Add LicenseRef-framed as allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.52-1
changelog:
  - Add LicenseRef-Frontier-Artistic-1.0 as not-allowed
  - Add LicenseRef-JasPer-1.0 as not-allowed
  - Create missing TOML for Callaway Nmap but reclassify as not-allowed, with
    usage exception
  - Add LicenseRef-NPSL-0.92 as not-allowed, corresponding to Callaway-era NPSL
  - Add LicenseRef-NPSL-0.93 as not-allowed to cover NPSL 0.93 and 0.94
  - Correct TOML files for LicenseRef-NPSL-0.94 and LicenseRef-NPSL-0.95
  - Add LicenseRef-NPSL-0.95 as not-allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: David Cantrell <dcantrell@redhat.com> - 1.27.3-1
changelog:
  - Upgrade to jdupes-1.27.3
  - Upstream project moved to codeberg.org; update spec accordingly
  - Add patch from author to fix a hash database error that could lead
    to data loss


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Remi Collet <remi@remirepo.net> - 5.0.0~alpha3-1
changelog:
  - update to 5.0.0alpha3
  - rename to php-nikic-php-parser5
  - install in /usr/share/php/PhpParser5
  - raise dependency on PHP 7.1


author: Remi Collet <remi@remirepo.net> - 1.18.1-1
changelog:
  - update to 1.18.1
  - raise dependency on PHP 7.4
  - raise dependency on libmongoc 1.26.0
  - raise dependency on libmongocrypt 1.9.0


author: Remi Collet <remi@remirepo.net> - 1.19.0-1
changelog:
  - update to 1.19.0
  - raise dependency on libbson and libmongc 1.27.0
  - raise dependency on libmongocrypt 1.10.0


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: blinxen <h-k-81@hotmail.com> - 1:1.2024.0-4
changelog:
  - Patch out Class-Path attribute in build.xml See
    https://docs.fedoraproject.org/en-US/packaging-
    guidelines/Java/#_no_class_path_in_manifest_mf


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


