# changelog

author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.0-1
changelog:
  - Update to version 3.3.0
  - Soname bump for libHepMC3 (3 to 4)
  - Additional build dependencies for tests
  - Fix an uninitialized value issue found by valgrind
  - Drop EPEL7 build (soon to be EOL)
  - Avoid assert due to implicit narrowing cast on 32 bit architectures
  - Suppress a valgrind error on Fedora 39 ppc64le


author: Robert Scheck <robert@fedoraproject.org> 3.18.0-3
changelog:
  - Add the baresip-avcodec, baresip-avfilter, baresip-avformat and
    baresip-swscale subpackages for Fedora and RHEL 9 (and newer)


author: Troy Dawson <tdawson@redhat.com> - 0.8.11-1
changelog:
  - determine_rhel_state: Fix missing phase check
  - Fix detection of releases in Maintenance Phase
  - Handle maintenance releases better


author: Troy Dawson <tdawson@redhat.com> - 0.8.13-1
changelog:
  - define centos in rpmdefines section
  - undefine fedora in rpmdefines section
  - resolves centpkg issue #111 and #112


author: Troy Dawson <tdawson@redhat.com> - 0.9.0-1
changelog:
  - Define compat shims for %patchN when building for EL <= 10
  - Get rid of SyntaxWarning: invalid escape sequence '\d'


author: Troy Dawson <tdawson@redhat.com> - 0.10.0-1
changelog:
  - Make lookaside cache work with SIG dist-git using "modern" layout (nforro)
  - Avoid superfluous quotes in request-gated-side-tag help (churchyard)
  - determine_rhel_state: Handle z-stream branches (sgallagh)
  - Authenticate to Product Pages (sgallagh)
  -- NOTE: centpkg time will be slower due to product page authentication.


author: Than Ngo <than@redhat.com> - 135.0.7049.95-1
changelog:
  - Update to 135.0.7049.95
    * CVE-2025-3619: Heap buffer overflow in Codecs
    * CVE-2025-3620: Use after free in USB


author: Than Ngo <than@redhat.com> - 136.0.7103.59-1
changelog:
  - Update to 136.0.7103.59
    * CVE-2025-4096: Heap buffer overflow in HTML
    * CVE-2025-4050: Out of bounds memory access in DevTools
    * CVE-2025-4051: Insufficient data validation in DevTools
    * CVE-2025-4052: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 136.0.7103.113-1
changelog:
  - Update to 136.0.7103.113
    * CVE-2025-4664: Insufficient policy enforcement in Loader
    * CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Miroslav Suchý <msuchy@redhat.com> 1.103-1
changelog:
  - update copr keys
  - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys
  - Add CentOS 10 and EPEL 10 GPG keys
  - add Alpine Linux and postmarketOS keys


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)
  - Add Keama migration utility (rhbz#2250608)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 5.108.0-4
changelog:
  - Rebuilt for libimobiledevice and libplist soname bump
  - Remove solid-power from files listing, since WIP APIs are no longer enabled (rhbz#2225952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.109.0-2
changelog:
  - Restore the power management backend, needed for plasma-pk-updates (#2233613)
  - But do not build the solid-power executable that conflicts with KF6 Solid


author: Dominik Mierzejewski <dominik@greysector.net> - 1.2.4-59.20240202git2213b76
changelog:
  - update to 1.2.4 from branch master
  - build without faad, ffmpeg4 and x264
  - drop RHEL4-era versions in BRs
  - sort BRs alphabetically and de-duplicate
  - SPDX license identifier
  - use Fedora versioning guidelines and macro names
  - use more explicit file list


author: Dominik Mierzejewski <dominik@greysector.net> - 1.2.4-61.20240202git2213b76
changelog:
  - drop missing lib{avc,raw}1394 build dependencies on s390x
  - add LGPLv2.1 to License field
  - own _libdir/libquicktime
  - use global instead of define


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.7-1
changelog:
  - update to 1.3.7 (upstream switched to meson build system)
  - fix python shebang in lddtree.py
  - build manpages (using xmlto)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.7-3
changelog:
  - ship the bash version of lddtree to avoid dependency on python3-pyelftools
  - fix python shebang in pylint
  - fix deprecated patchN macro usage


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Michel Lind <salimma@fedoraproject.org> - 4.2.14-1
changelog:
  - Update to 4.2.14 to address multiple CVEs
  - resolves CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, CVE-2024-39614


author: Michel Lind <salimma@fedoraproject.org> - 4.2.20-1
changelog:
  - Update to version 4.2.20; Fixes: RHBZ#2350882
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 4.2.22-1
changelog:
  - Update to version 4.2.22
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path
  - Revert pyproject conversion; we don't need it and don't have the needed
    version
  - Rebase Python 3.13 patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.36.00-1
changelog:
  - Update to 6.36.00
  - Enable the R interface for EPEL 10.1
  - Removed subpackages: root-gui-qt5webdisplay, -hist-draw, -histv7 and -html
  - New subpackage: root-roofit-codegen


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241115git03e441d-1
changelog:
  - Update to 0^20241115git03e441d
  - Add `PyLong_IsPositive`/`Negative`/`Zero()` functions
  - Relax `PYPY_VERSION_NUM` requirements for hash macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250128gitc84545f-1
changelog:
  - Update to 0^20250128gitc84545f
  - Remove `PyConfig.use_system_logger`: it will only be available on Python
    3.13.2 which is not released yet.
  - Fix multiple definitions for `Py_fclose`
  - Avoid `Py_ARRAY_LENGTH()` (because it fails with C++ on Python 3.9 on
    macOS)
  - Improve `test_config`
  - Replace `extern` with `PyAPI_FUNC()`


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.1.8-3
changelog:
  - Do not hardcode the build type
  - Use CMAKE_BUILD_TYPE RelWithDebInfo to avoid -Werror in compiler flags


