# changelog

author: Douglas Kosovic <doug@uq.edu.au> - 1.20.8-1
changelog:
  - Updated to 1.20.8 release
  - Added conditional recommends for NetworManager-l2tp-gnome and plasma-nm-l2tp
  - Added runstatedir=/run


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.10-1
changelog:
  - Updated to 1.20.10 release
  - Remove redundant ppp related patches
  - Use ppp_version macro from NetworkManager


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.16-1
changelog:
  - Update to 1.8.16 release
  - Fix detection of OpenVPN 2.5.0
  - Allow the connection to persist across network failures when the VPN
    profile has 'vpn.persistent=yes'.
  - Fix parsing of incomplete IPv6 configurations pushed by server


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.1.0-2
changelog:
  - Added angie-module-auth-spnego
  - Added angie-module-brotli
  - Added angie-module-dav-ext
  - Added angie-module-headers-more
  - Added angie-module-ndk
  - Added angie-module-rtmp
  - Added angie-module-set-misc
  - Updated angie-module-njs to 0.7.11
  - Separate angie-module-njs-cli package


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.1.0-3
changelog:
  - Added angie-module-jwt
  - Added angie-module-subs
  - Added angie-module-upload
  - Added angie-module-vod
  - Updated angie-module-njs to 0.7.12
  - Updated angie-module-njs-cli to 0.7.12


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.2.0-2
changelog:
  - Added angie-module-cache-purge
  - Added angie-module-echo
  - Added angie-module-keyval
  - Added angie-module-postgresql
  - Updated angie-module-njs to 0.8.0
  - Updated angie-module-njs-cli to 0.8.0


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.3.0-1
changelog:
  - Release 1.3.0
  - Updated angie-module-keyval to 0.2.0
  - Updated angie-module-lua to 0.10.25
  - Updated angie-module-njs to 0.8.1


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.3.1-3
changelog:
  - Added angie-module-testcookie
  - Updated angie-module-headers-more to 0.35
  - Updated angie-module-njs to 0.8.2
  - Updated angie-module-vod to 1.32


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.4.0-1
changelog:
  - Release 1.4.0
  - Added angie-module-auth-ldap
  - Updated angie-module-auth-jwt to 0.4.0
  - Updated angie-module-headers-more to 0.36
  - Updated angie-module-ndk to 0.3.3
  - Updated angie-module-opentracing to 0.33.0


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.4.0-3
changelog:
  - Added angie-module-zip ver. 1.3.0
  - Updated angie-module-auth-jwt to 0.6.0
  - Updated angie-module-headers-more to 0.37
  - Updated angie-module-lua to 0.10.26
  - Updated angie-module-modsecurity to 3.0.11


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.4.1-1
changelog:
  - Release 1.4.1
  - Added angie-module-dynamic-limit-req
  - Updated angie-module-njs to 0.8.3
  - Updated angie-module-vod to 1.33


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.6.0-1
changelog:
  - Release 1.6.0
  - Updated angie-module-auth-jwt to 0.7.0
  - Updated angie-module-auth-ldap to 241200eac8e4acae74d353291bd27f79e5ca3dc4
  - Updated angie-module-jwt to 3.4.1
  - Updated angie-module-keyval to 0.3.0
  - Updated angie-module-njs to 0.8.5


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.6.1-1
changelog:
  - Release 1.6.1
  - Updated angie-module-opentracing to v0.35.3
  - Updated angie-module-zstd to f4ba115e0b0eaecde545e5f37db6aa18917d8f4b


author: Than Ngo <than@redhat.com> - 108.0.5359.124-3
changelog:
  - build with system ffmpeg-free and system libaom
  - fix widewine extension issue
  - vaapi, disable UseChromeOSDirectVideoDecoder
  - workaround for linking issue in clang <= 14


author: Than Ngo <than@redhat.com> - 108.0.5359.124-5
changelog:
  - enable qt backend for el >= 9 and fedora >= 35
  - drop i686
  - conditional BR on java-1.8.0-openjdk-headless


author: Than Ngo <than@redhat.com> - 109.0.5414.74-2
changelog:
  - conditionalize system_build_flags
  - cleaned up gn defines
  - add BR on python3-importlib-metadata
  - set correct toolchain gcc|clang
  - fix FTBFS with gcc13


author: Than Ngo <than@redhat.com> - 110.0.5481.77-2
changelog:
  - fix #2071126, enable support V4L2 stateless decoders for aarch64 plattform
  - fix prefers-color-scheme
  - drop snapshot_blob.bin, replace snapshot_blob.bin with v8_context_snapshot.bin
  - move headless_lib*.pak to headless subpackage


author: Than Ngo <than@redhat.com> - 112.0.5615.121-2
changelog:
  - fix vaapi issue on xwayland
  - fix the build order, chrome_feed_response_metadata.pb.h file not found
  - fix compiler flags and typo


author: Than Ngo <than@redhat.com> - 114.0.5735.45-1
changelog:
  - update to 114.0.5735.45
  - add qt6 linuxui backend
  - backport: handle scale factor changes
  - backport: fix font double_scaling


author: Than Ngo <than@redhat.com> - 114.0.5735.133-1
changelog:
  - update to 114.0.5735.133 
  - Enable AllowQt feature flag
  - Fix Qt deps
  - Fix Qt logical scale factor


author: Arkady L. Shane <ashejn@msvsphere.ru> - 114.0.5735.133-1.inferit
changelog:
  - Rebuilt for MSVSphere 9.2
  - set Yandex search engine by default
  - replace Google logo with Yandex logo
  - set new home page


author: Arkady L. Shane <ashejn@msvsphere.ru> - 116.0.5845.187-1.inferit
changelog:
  - Update to 116.0.5845.187
  - Change url to https://msvsphere-os.ru
  - Import bookmarks from system-bookmarks package


author: Arkady L. Shane <ashejn@msvsphere.ru> - 117.0.5938.149-1.inferit
changelog:
  - Update to 117.0.5938.149
  - fix CVE-2023-5346: Type Confusion in V8
  - add workaround for the crash on BTI capable system


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 118.0.5993.70-1.inferit
changelog:
  - Update to 118.0.5993.70
      - CVE-2023-5218: Use after free in Site Isolation.
      - CVE-2023-5487: Inappropriate implementation in Fullscreen.
      - CVE-2023-5484: Inappropriate implementation in Navigation.
      - CVE-2023-5475: Inappropriate implementation in DevTools.
      - CVE-2023-5483: Inappropriate implementation in Intents.
      - CVE-2023-5481: Inappropriate implementation in Downloads.
      - CVE-2023-5476: Use after free in Blink History.
      - CVE-2023-5474: Heap buffer overflow in PDF.
      - CVE-2023-5479: Inappropriate implementation in Extensions API.
      - CVE-2023-5485: Inappropriate implementation in Autofill.
      - CVE-2023-5478: Inappropriate implementation in Autofill.
      - CVE-2023-5477: Inappropriate implementation in Installer.
      - CVE-2023-5486: Inappropriate implementation in Input.
      - CVE-2023-5473: Use after free in Cast.
  - drop use_gnome_keyring as it's removed by upstream


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 119.0.6045.123-1.inferit
changelog:
  - update to 119.0.6045.123, include following security fixes:
    high CVE-2023-5996: Use after free in WebAudio
  - enable debuginfo
  - sync patches with upstream


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 119.0.6045.159-1.inferit
changelog:
  - update to 119.0.6045.159
  - add Requires/Conflicts for ABI break in fmpeg-free 6.0.1
  - drop first_dts patch, reintroduce first_dts patch in ffmpeg-free-6.0.1
  - fixed python3 syntaxWarning: invalid escape sequenc
  - skip clang's patches for epel8 that now gets clang-16 update
  - fixed bz#2240127, Some h.264 mp4s do not play 
  - fixed python3 syntaxWarning: invalid escape sequence
  - fix ffmpeg conflicts


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.62-2.inferit
changelog:
  - drop unsupported ldflag which caused build failure
  - update to 120.0.6099.62
  - fixed bz#2252874, built with control flow integrity (CFI) support
  - enable qt6 UI backend
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.109-1.inferit
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.199-1.inferit
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
      * CVE-2024-0222: Use after free in ANGLE
      * CVE-2024-0223: Heap buffer overflow in ANGLE
      * CVE-2024-0224: Use after free in WebAudio
      * CVE-2024-0225: Use after free in WebGPU


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.224-1.inferit
changelog:
  - update to 120.0.6099.224
    * High CVE-2024-0517: Out of bounds write in V8
    * High CVE-2024-0518: Type Confusion in V8
    * High CVE-2024-0519: Out of bounds memory access in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 121.0.6167.85-1.inferit
changelog:
  - update to 121.0.6167.85
    * High CVE-2024-0807: Use after free in WebAudio
    * High CVE-2024-0812: Inappropriate implementation in Accessibility
    * High CVE-2024-0808: Integer underflow in WebUI
    * Medium CVE-2024-0810: Insufficient policy enforcement in DevTools
    * Medium CVE-2024-0814: Incorrect security UI in Payments
    * Medium CVE-2024-0813: Use after free in Reading Mode
    * Medium CVE-2024-0806: Use after free in Passwords
    * Medium CVE-2024-0805: Inappropriate implementation in Downloads
    * Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
    * Low CVE-2024-0811: Inappropriate implementation in Extensions API
    * Low CVE-2024-0809: Inappropriate implementation in Autofill


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 121.0.6167.139-2.inferit
changelog:
  - Define missing bundlelibwebp variable
  - update to 121.0.6167.139
    * High CVE-2024-1060: Use after free in Canvas
    * High CVE-2024-1059: Use after free in WebRTC
    * High CVE-2024-1077: Use after free in Network
  - Enable Qt
  - Support for 64K pages on Linux/AArch64


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 121.0.6167.160-1.inferit
changelog:
  - update to 121.0.6167.160
    * High CVE-2024-1284: Use after free in Mojo
    * High CVE-2024-1283: Heap buffer overflow in Skia


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 122.0.6261.57-1.inferit
changelog:
  - update to 122.0.6261.57
     * High CVE-2024-1669: Out of bounds memory access in Blink
     * High CVE-2024-1670: Use after free in Mojo
     * Medium CVE-2024-1671: Inappropriate implementation in Site Isolation
     * Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy
     * Medium CVE-2024-1673: Use after free in Accessibility
     * Medium CVE-2024-1674: Inappropriate implementation in Navigation
     * Medium CVE-2024-1675: Insufficient policy enforcement in Download
     * Low CVE-2024-1676: Inappropriate implementation in Navigation.


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 122.0.6261.69-1.inferit
changelog:
  - update to 122.0.6261.69
  - fix build error on el8
  - bz#2265039, built with -fwrapv for improved memory safety
  - bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 122.0.6261.94-1.inferit.1
changelog:
  - upstream security release 122.0.6261.94
     * High : Type Confusion in V8
  - fixed bz#2265957, added correct platform in chromium use agent


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 122.0.6261.111-1.inferit
changelog:
  - upstream security release 122.0.6261.111
     * High CVE-2024-2173: Out of bounds memory access in V8
     * High CVE-2024-2174: Inappropriate implementation in V8
     * High CVE-2024-2176: Use after free in FedCM


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 122.0.6261.128-1.inferit
changelog:
  - upstream security release 122.0.6261.128
     * High CVE-2024-2400: Use after free in Performance Manager


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.58-1.inferit
changelog:
  - update to 123.0.6312.58
     * High CVE-2024-2625: Object lifecycle issue in V8
     * Medium CVE-2024-2626: Out of bounds read in Swiftshader
     * Medium CVE-2024-2627: Use after free in Canvas
     * Medium CVE-2024-2628: Inappropriate implementation in Downloads
     * Medium CVE-2024-2629: Incorrect security UI in iOS
     * Medium CVE-2024-2630: Inappropriate implementation in iOS
     * Low CVE-2024-2631: Inappropriate implementation in iOS
  - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.86-1.inferit
changelog:
  - update to 123.0.6312.86
     * Critical CVE-2024-2883: Use after free in ANGLE
     * High CVE-2024-2885: Use after free in Daw
     * High CVE-2024-2886: Use after free in WebCodecs
     * High CVE-2024-2887: Type Confusion in WebAssembly
  - fixed bz#2269768 - enable build ppc64le package for F40
  - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date
  - fixed bz#2271183 - disable screen ai service


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.105-1.inferit
changelog:
  - update to 123.0.6312.105
     * High CVE-2024-3156: Inappropriate implementation in V8
     * High CVE-2024-3158: Use after free in Bookmarks
     * High CVE-2024-3159: Out of bounds memory access in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.122-1.inferit
changelog:
  - update to 123.0.6312.122
    * High CVE-2024-3157: Out of bounds write in Compositing
    * High CVE-2024-3516: Heap buffer overflow in ANGLE
    * High CVE-2024-3515: Use after free in Dawn


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 124.0.6367.78-1.inferit
changelog:
  - update to 124.0.6367.78
    * Critical CVE-2024-4058: Type Confusion in ANGLE
    * High CVE-2024-4059: Out of bounds read in V8 API
    * High CVE-2024-4060: Use after free in Dawn


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 124.0.6367.91-1.inferit
changelog:
  - update to 124.0.6367.91
  - fixed bz#2277228 - chromium wrapper causes library issues (symbol lookup error)
  - use system dav1d


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 124.0.6367.118-1.inferit
changelog:
  - update to 124.0.6367.118
    * High CVE-2024-4331: Use after free in Picture In Picture
    * High CVE-2024-4368: Use after free in Dawn
  - use system highway


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 124.0.6367.155-1.inferit
changelog:
  - update to 124.0.6367.155
    * High CVE-2024-4558: Use after free in ANGLE
    * High CVE-2024-4559: Heap buffer overflow in WebAudio


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 125.0.6422.60-1.inferit
changelog:
  - update to 125.0.6422.60
    * High CVE-2024-4947: Type Confusion in V8
    * High CVE-2024-4948: Use after free in Dawn
    * Medium CVE-2024-4949: Use after free in V8
    * Low CVE-2024-4950: Inappropriate implementation in Downloads


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 125.0.6422.76-1.inferit
changelog:
  - fix bz#2282246, update to 125.0.6422.76
   * High CVE-2024-5157: Use after free in Scheduling
   * High CVE-2024-5158: Type Confusion in V8
   * High CVE-2024-5159: Heap buffer overflow in ANGLE
   * High CVE-2024-5160: Heap buffer overflow in Dawn
  - cleanup
  - remove unneeded BRs
  - workarounds for el7 build


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 125.0.6422.141-1.inferit
changelog:
  - update to 125.0.6422.141
    * High CVE-2024-5493: Heap buffer overflow in WebRTC
    * High CVE-2024-5494: Use after free in Dawn
    * High CVE-2024-5495: Use after free in Dawn
    * High CVE-2024-5496: Use after free in Media Session
    * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
    * High CVE-2024-5498: Use after free in Presentation API
    * High CVE-2024-5499: Out of bounds write in Streams API
  - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams
  - cleanup chromium.conf


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 126.0.6478.55-1.inferit
changelog:
  - update to 126.0.6478.55
    * High CVE-2024-5830: Type Confusion in V8
    * High CVE-2024-5831: Use after free in Dawn
    * High CVE-2024-5832: Use after free in Dawn
    * High CVE-2024-5833: Type Confusion in V8
    * High CVE-2024-5834: Inappropriate implementation in Dawn
    * High CVE-2024-5835: Heap buffer overflow in Tab Groups
    * High CVE-2024-5836: Inappropriate Implementation in DevTools
    * High CVE-2024-5837: Type Confusion in V8
    * High CVE-2024-5838: Type Confusion in V8
    * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator
    * Medium CVE-2024-5840: Policy Bypass in CORS
    * Medium CVE-2024-5841: Use after free in V8
    * Medium CVE-2024-5842: Use after free in Browser UI
    * Medium CVE-2024-5843: Inappropriate implementation in Downloads
    * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip
    * Medium CVE-2024-5845: Use after free in Audio
    * Medium CVE-2024-5846: Use after free in PDFium
    * Medium CVE-2024-5847: Use after free in PDFium
  - Update Chromium Gost patches
  - fix build error on el7 and el8 - fatal error: sys/ifunc.h file not found


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 126.0.6478.114-1.inferit
changelog:
  - update to 126.0.6478.114
    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 126.0.6478.126-1.inferit
changelog:
  - update to 126.0.6478.126
    * High CVE-2024-6290: Use after free in Dawn
    * High CVE-2024-6291: Use after free in Swiftshader
    * High CVE-2024-6292: Use after free in Dawn
    * High CVE-2024-6293: Use after free in Dawn


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 126.0.6478.182-1.inferit
changelog:
  - update to 126.0.6478.182
    * High CVE-2024-6772: Inappropriate implementation in V8
    * High CVE-2024-6773: Type Confusion in V8
    * High CVE-2024-6774: Use after free in Screen Capture
    * High CVE-2024-6775: Use after free in Media Stream
    * High CVE-2024-6776: Use after free in Audio
    * High CVE-2024-6777: Use after free in Navigation
    * High CVE-2024-6778: Race in DevTools
    * High CVE-2024-6779: Out of bounds memory access in V8
  - fixed rhbz#2293202, chromium Wayland UI regression
  - made qt5-ui and qt6-ui as subpackage


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.72-1.inferit
changelog:
  - update to 127.0.6533.72
  	* CVE-2024-6988: Use after free in Downloads
  	* CVE-2024-6989: Use after free in Loader
  	* CVE-2024-6991: Use after free in Dawn
  	* CVE-2024-6992: Out of bounds memory access in ANGLE
  	* CVE-2024-6993: Inappropriate implementation in Canvas
  	* CVE-2024-6994: Heap buffer overflow in Layout
  	* CVE-2024-6995: Inappropriate implementation in Fullscreen
  	* CVE-2024-6996: Race in Frames
  	* CVE-2024-6997: Use after free in Tabs
  	* CVE-2024-6998: Use after free in User Education
  	* CVE-2024-6999: Inappropriate implementation in FedCM
  	* CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  	* CVE-2024-7001: Inappropriate implementation in HTML
  	* CVE-2024-7003: Inappropriate implementation in FedCM
  	* CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing
  	* CVE-2024-7005: Insufficient validation of untrusted input in Safe
  - fix condition for is_cfi/use_thin_lto on aarch64/ppc64le
  - update powerpc patches


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.88-2.inferit
changelog:
  - update to 127.0.6533.88
      * CVE-2024-6990
  - refreshed ppc64le patches
  - workaround for build error on aarch64 F41
  - remove old patch that seems to be the cause of a crash
    when the user set user.max_user_namespaces to 0


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.88-3.inferit
changelog:
  - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
  - add ppc64le patch to fix runtime assertion trap on ppc64el systems
  - refresh ppc64le patch to work around broken 64k allocator code on arm64


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.99-1.inferit
changelog:
  - update to 127.0.6533.99
    * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
    * High CVE-2024-7533: Use after free in Sharing
    * High CVE-2024-7550: Type Confusion in V8
    * High CVE-2024-7534: Heap buffer overflow in Layout
    * High CVE-2024-7535: Inappropriate implementation in V8
    * High CVE-2024-7536: Use after free in WebAudio


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 128.0.6613.84-1.inferit
changelog:
  - update to 128.0.6613.84
    * High CVE-2024-7964: Use after free in Passwords
    * High CVE-2024-7965: Inappropriate implementation in V8
    * High CVE-2024-7966: Out of bounds memory access in Skia
    * High CVE-2024-7967: Heap buffer overflow in Fonts
    * High CVE-2024-7968: Use after free in Autofill
    * High CVE-2024-7971: Type confusion in V8
    * Medium CVE-2024-7972: Inappropriate implementation in V8
    * Medium CVE-2024-7973: Heap buffer overflow in PDFium
    * Medium CVE-2024-7974: Insufficient data validation in V8 API
    * Medium CVE-2024-7975: Inappropriate implementation in Permissions
    * Medium CVE-2024-7976: Inappropriate implementation in FedCM
    * Medium CVE-2024-7977: Insufficient data validation in Installer
    * Medium CVE-2024-7978: Insufficient policy enforcement in Data Transfer
    * Medium CVE-2024-7979: Insufficient data validation in Installer
    * Medium CVE-2024-7980: Insufficient data validation in Installer
    * Low CVE-2024-7981: Inappropriate implementation in Views
    * Low CVE-2024-8033: Inappropriate implementation in WebApp Installs
    * Low CVE-2024-8034: Inappropriate implementation in Custom Tabs
    * Low CVE-2024-8035: Inappropriate implementation in Extensions


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 128.0.6613.113-1.inferit
changelog:
  - update to 128.0.6613.113
    * High CVE-2024-7969: Type Confusion in V8
    * High CVE-2024-8193: Heap buffer overflow in Skia
    * High CVE-2024-8194: Type Confusion in V8
    * High CVE-2024-8198: Heap buffer overflow in Skia


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 128.0.6613.119-1.inferit
changelog:
  - update to 128.0.6613.119
    * High CVE-2024-8362: Use after free in WebAudio.
    * High CVE-2024-7970: Out of bounds write in V8.


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 128.0.6613.137-1.inferit
changelog:
  - update to 128.0.6613.137
    * High CVE-2024-8636: Heap buffer overflow in Skia
    * High CVE-2024-8637: Use after free in Media Router
    * High CVE-2024-8638: Type Confusion in V8
    * High CVE-2024-8639: Use after free in Autofill


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.58-1.inferit
changelog:
  - update to 129.0.6668.58
    * High CVE-2024-8904: Type Confusion in V8
    * Medium CVE-2024-8905: Inappropriate implementation in V8
    * Medium CVE-2024-8906: Incorrect security UI in Downloads
    * Medium CVE-2024-8907: Insufficient data validation in Omnibox
    * Low CVE-2024-8908: Inappropriate implementation in Autofill
    * Low CVE-2024-8909: Inappropriate implementation in UI


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.70-1.inferit
changelog:
  - update to 129.0.6668.70
    * High CVE-2024-9120: Use after free in Dawn
    * High CVE-2024-9121: Inappropriate implementation in V8
    * High CVE-2024-9122: Type Confusion in V8
    * High CVE-2024-9123: Integer overflow in Skia


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.89-1.inferit
changelog:
  - update to 129.0.6668.89
    * High CVE -2024-7025: Integer overflow in Layout
    * High CVE-2024-9369: Insufficient data validation in Mojo
    * High CVE-2024-9370: Inappropriate implementation in V8
  - Added clang 19 support


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.100-1.inferit
changelog:
  - update to 129.0.6668.100
    * High CVE-2024-9602: Type Confusion in V8.
    * High CVE-2024-9603: Type Confusion in V8.


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 130.0.6723.58-1.inferit
changelog:
  - update to 130.0.6723.58
    * High CVE-2024-9954: Use after free in AI
    * Medium CVE-2024-9955: Use after free in Web Authentication
    * Medium CVE-2024-9956: Inappropriate implementation in Web Authentication
    * Medium CVE-2024-9957: Use after free in UI
    * Medium CVE-2024-9958: Inappropriate implementation in PictureInPicture
    * Medium CVE-2024-9959: Use after free in DevTools
    * Medium CVE-2024-9960: Use after free in Dawn
    * Medium CVE-2024-9961: Use after free in Parcel Tracking
    * Medium CVE-2024-9962: Inappropriate implementation in Permissions
    * Medium CVE-2024-9963: Insufficient data validation in Downloads
    * Low CVE-2024-9964: Inappropriate implementation in Payments
    * Low CVE-2024-9965: Insufficient data validation in DevTools
    * Low CVE-2024-9966: Inappropriate implementation in Navigations


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 130.0.6723.69-1.inferit
changelog:
  - update to 130.0.6723.69
    * High CVE-2024-10229: Inappropriate implementation in Extensions
    * High CVE-2024-10230: Type Confusion in V8
    * High CVE-2024-10231: Type Confusion in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 130.0.6723.91-1.inferit
changelog:
  - update to 130.0.6723.91
    * Critical CVE-2024-10487: Out of bounds write in Dawn
    * High CVE-2024-10488: Use after free in WebRTC


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 130.0.6723.116-1.inferit
changelog:
  - Update to 130.0.6723.116
    * High CVE-2024-10826: Use after free in Family Experience
    * High CVE-2024-10827: Use after free in Serial


author: Dalton Miner <daltonminer@gmail.com> - 1.21.20-1
changelog:
  - Update dpkg to 1.21.20 (#2150017)
  - Add zstd support (#2112807)
  - Fully switch to libmd for MD5 implementation
    https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/debian/?id=2767801430de3c6d4ec7394e286fc261a8180feb


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 1.22.6-1
changelog:
  - Update dpkg to 1.22.6
  - Drop dpkg-fsys-usrunmess as it is not required on properly usr-merged systems
    and pulls in perl as a dependency.


author: Sérgio Basto <sergio@serjux.com> - 1.31-1
changelog:
  - Update fakeroot to 1.31 (#2167522)
  - Add fix from Debian
  - Drop fakeroot-inttypes.patch which had almost 10 year old and I dont know what his purpose
  - Drop relax_tartest.patch we don't need it anymore


author: Sérgio Basto <sergio@serjux.com> - 1.35.1-1
changelog:
  - Update to 1.35.1
  - Update to version 1.35 (Wed Jun 05 2024 Packit <hello@packit.dev>)
  - Resolves: rhbz#2290632


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8.1.1-4
changelog:
  - Backport fix handling of formattable types implicitly convertible to pointers (fixes: rhbz#2059736)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-8
changelog:
  - Bootstrap the compiler for EPEL9
  - Disable building .pdf documentation (missing dependencies on EPEL9)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-10
changelog:
  - Add a patch to fix IDE-related non-executable files being installed to /usr/bin
  - Add a patch to fix broken stack trace handling on aarch64
  - Use FPMAKEOPT for parallel compilation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-4
changelog:
  - Modernize and clean up the spec file
  - Make it harder to miss any .so version change
  - Properly install the license file
  - Remove an obsolete sed-patch
  - Move documentation and examples to a -doc subpackage
  - Build PDF instead of HTML documentation


author: Robert Scheck <robert@fedoraproject.org> 11.2.1-13
changelog:
  - backport from 11.2.1-10: update from releases/gcc-11-branch (#2063255)
  - backport from 11.2.1-10: fix x86 vector initialization expansion fallback
  - backport from 11.2.1-10: drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Robert Scheck <robert@fedoraproject.org> 11.3.1-3
changelog:
  - backport from 11.3.1-2.1: fix handling of invalid ranges in std::regex (#2106262)
  - backport from 11.3.1-2: update from releases/gcc-11-branch (#2077536)
  - backport from 11.3.1-2: fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - backport from 11.3.1-2: remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Robert Scheck <robert@fedoraproject.org> 11.3.1-5
changelog:
  - backport from 11.3.1-4.4: s390x: add support for register arguments preserving (#2168204)
  - backport from 11.3.1-4.3: compile the cross binaries as PIE/-z now (#2155452)
  - backport from 11.3.1-4.2: ship libitm.spec in cross-gcc (#2154462)
  - backport from 11.3.1-4.1: add cross compiler functionality for non-production uses (#2149650)
  - backport from 11.3.1-4: update from releases/gcc-11-branch (#2117632)
  - backport from 11.3.1-4: fix the detection of Sapphire Rapids in host_detect_local_cpu
  - backport from 11.3.1-4: fix -Wmismatched-dealloc documentation (#2116635)


author: Robert Scheck <robert@fedoraproject.org> 11.4.1-3
changelog:
  - backport from 11.4.1-2.3: fix member vs global template (RHEL-2607)
  - backport from 11.4.1-2.2: guard the bit test merging code in if-combine (RHEL-6068)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2.1: use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2: update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release


author: Alain Vigne <avigne@fedoraproject.org> - 0.3.8-1
changelog:
  - 0.3.8 bump (rhbz#2148740)
  - Switch to json-glib, where available
  - Disable notify
  - Tests are disabled
  - SPDX license identifier


author: Paul Howarth <paul@city-fan.org> - 1:1.2.10-68
changelog:
  - Tweak C89 setting to work for older releases without %set_build_flags, or
    with %set_build_flags that does not set $CC (e.g. EL-7)
  - Use %license unconditionally
  - Use SPDX-format license tag


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.3.1-3
changelog:
  - Add Mozilla plugin path to MOZ_GMP_PATH instead of overriding unconditionally
  - Resolves: rhbz#2225112


author: Sergey Cherevko <s.cherevko@msvsphere.ru> - 0.20.0-1.inferit.1
changelog:
  - Fixed the launch of the keyboard system settings
  - Adapted spec for MSVSphere
  - Rebuilt for MSVSphere 9.2


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-3
changelog:
  - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
    Latex2e-translated-notice"


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-4
changelog:
  - Fix a heap overread in search_brace/lexi
  - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)


author: Lukas Javorsky <ljavorsk@redhat.com> - 2.7.6-5
changelog:
  - Rebuilt for minizip-ng transition Fedora change
  - Fedora Change: https://fedoraproject.org/wiki/Changes/MinizipNGTransition


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.5-1
changelog:
  - Update to 2.7.5
  - Use enable_devtoolset12 macro for EPEL8
  - Undefined _annotated_build for EPEL8
  - Remove unneeded comment about DOCS
  - Remove custom mimetype desktop file as this method is deprecated


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 5.108.0-4
changelog:
  - Rebuilt for libimobiledevice and libplist soname bump
  - Remove solid-power from files listing, since WIP APIs are no longer enabled (rhbz#2225952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.109.0-2
changelog:
  - Restore the power management backend, needed for plasma-pk-updates (#2233613)
  - But do not build the solid-power executable that conflicts with KF6 Solid


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.2.6-1
changelog:
  - Update to v2.2.6
  - Add a patch to fix build errors when using the GTK3 widgetset
  - Convert License tag to SPDX
  - Drop Patch1 (fix components explicitly requesting STABS debuginfo - fixed upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.2.6-2
changelog:
  - Put the IDE, LCL and documentation in separate packages
  - Move lazbuild and other tools to a separate sub-package
  - Apart from the default GTK2, build the LCL with GTK3, Qt and Qt5
  - Use multiple jobs during the build
  - Add Obsoletes: for smooth upgrade from F37/F38


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.2.6-3
changelog:
  - Move /etc/lazarus from lazarus-ide to lazarus-tools (files required by lazbuild)
  - Edit dependencies - make the lazarus metapackage strongly require the default set of sub-packages


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.2-1
changelog:
  - Update to 1.3.2 (RHBZ#2112605, RHBZ#2113476, RHBZ#2089046)
  - Don't build bdj on i386 (RHBZ#2104068)


author: Simone Caronni <negativo17@gmail.com> - 2.2.6-7
changelog:
  - SPEC file cleanup.
  - Use proper macros everywhere.
  - Fix permissions for binaries.
  - Fix rpmlint issues.
  - Trim changelog.


author: Ron Olson <tachoknight@gmail.com> 5.6.1-2
changelog:
  - Merged patch 0a56660 from Shawn Anastasio to include
    ppc64le as one of the architectures to build for


author: wally <wally> 5.3.5-1.mga10
changelog:
  + Revision: 2024685
  - new version 5.3.5
  + daviddavid <daviddavid>
  - rebuild for new jsoncpp 1.9.5
  - rebuild for new zxing-cpp 2.1.0


author: wally <wally> 5.3.5-2.mga10
changelog:
  + Revision: 2024993
  - force jsoncpp req via cmake
  - force system xsd
  - drop unmaintained pkg-conf .pc files


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-22
changelog:
  - adopt for Fedora
  - hard-code ABI SONAME to avoid inadvertent breaks
  - use SPDX identifier
  - fix spurious executable permission
  - drop redundant configure flag


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-24
changelog:
  - add explicit build dependencies
  - use a modern pkgconf runtime dependency
  - annotate upstream patch origin


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Sérgio Basto <sergio@serjux.com> - 1.2.4-54.124.20210720git2729591
changelog:
  - Update to 1.2.4.124.20210720git2729591 (ffmpeg completely borked the API with
    libavcodec version 59. disable libavcodec)


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Paul Howarth <paul@city-fan.org> - 1.10.0-4
changelog:
  - In 8.8 OpenSSH disabled sha1 rsa-sha keys out of the box,
    so we need to re-enable them as a workaround for the test
    suite until upstream updates the tests
    See: https://github.com/libssh2/libssh2/issues/630
  - Drop other test workarounds, none of them being needed any longer


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Frantisek Sumsal <frantisek@sumsal.cz> - 1.2.0-7
changelog:
  - Initial EPEL 9 build for BZ#2029481
  - Temporarily skip building docs due to work around BZ#2031879


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-1
changelog:
  - Update to 9.2.1 (close RHBZ#2273352, fix CVE-2024-27982)
  - Switch from xz to zstd compression for the “dev” bundle archive


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-3
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: David Abdurachmanov <davidlt@rivosinc.com> - 16.0.6-9
changelog:
  - Add support for riscv64
  - Fix build error: '/usr/bin/ld: bad -plugin-opt option' on riscv64.
  - Lower memory consumption on riscv64
  - Disable LTO (ld.gold not supported on riscv64)


author: Simone Caronni <negativo17@gmail.com> - 1.18.8-1
changelog:
  - Update to 1.18.8, switch to Meson.
  - Update docs installation.
  - Drop gcc/python-devel build requirements.
  - Avoid exclude directives in the files section so build ids are not duplicated.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.18.8-3
changelog:
  - Remove all symlinks in previous -devel subpackage in %pre_trans
    to ensure update transaction (#2123422)


author: Sandro Mani <manisandro@gmail.com> - 12.0.1-2
changelog:
  - Drop --enable-threads=posix, it hardcodes -lpthread in the link flags and
    breaks statically linking


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Alain Vigne <avigne@fedoraproject.org> 1.3.2-1
changelog:
  - upstream release 1.3.2
  - Fix CVE-2022-44789 (rhbz#2148261)
  - Fix CVE-2022-30975 (rhbz#2088596)
  - Fix CVE-2022-30974 (rhbz#2088591)


author: Richard W.M. Jones <rjones@redhat.com> - 2:2022.5.17-1
changelog:
  - New upstream version 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789


author: Martin Winter <me@letsfindaway.de>
changelog:
  - update to 1.7.0~git47a96e1
    - use development branch to enable build for Tumbleweed
      (switch from QWebKit to QWebEngine)
  - add patches fixing known issues according to existing upstream PRs
    - 0551-common-background-drawing.patch
    - 0569-scale-mirror-pixmap.patch
    - 0604-qt-5.12-compatibility.patch
    - 0629-bug-ruler.patch
    - 0633-improve-displaymanager.patch
  - remove unused build dependencies


author: Martin Winter <me@letsfindaway.de>
changelog:
  - fix several issues
    - add 0008-install-fonts.patch
    - add 0637-fix-pdf-background-export.patch
    - add 0641-fix-font-handling.patch


author: Martin Winter <me@letsfindaway.de>
changelog:
  - update to version 1.7.0~git20220914.47a96e1
  - feat: user configurable shortcuts
    * add 0460-shortcut-configuration.patch
  - fix: boxing in single screen mode
    * update 0633-improve-displaymanager.patch
  - fix: PDF background export
    * update 0637-fix-pdf-background-export.patch
  - fix: font handling
    * update 0641-fix-font-handling.patch
  - fix: PDF export scaling
    * add 0649-fix-pdf-export-scaling.patch
  - refactor: Linux build and installation
    * add 0651-chore-reorganize-linux-build.patch
    * replaces 0001-Rewrite-libs.pri.patch
    * replaces 0002-Install-to-correct-directories-on-linux.patch
    * replaces 0003-podcast.pri-port-to-pkgconfig.patch
    * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
    * replaces 0005-Add-svg-icon.patch
    * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
    * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
    * replaces 0008-install-fonts.patch
    * add mimespec for .ubz files
    * also improve handling of onboard on-screen keyboard
  - refactor: clean spec file


author: Martin Winter <me@letsfindaway.de>
changelog:
  - fix file list in spec file
    - do not include /usr/share/mime/packages directory owned by
      filesystem


author: Martin Winter <me@letsfindaway.de>
changelog:
  - update to version 1.7.0~git20221129.9de37af
  - feat: user configurable shortcuts
    * replace 0460-shortcut-configuration.patch by updated
      0686-shortcut-configuration.patch
    * add 9686-cmake-add-shortcut-manager.patch
      add new files to CMakeLists.txt
  - fix: background drawing when switching page size
    * update 0551-common-background-drawing.patch
  - fix: mirror pixmap size
    * update 0569-scale-mirror-pixmap.patch
  - remove upstreamed patches
    * remove upstreamed 0604-qt-5.12-compatibility.patch
    * remove upstreamed 0629-bug-ruler.patch
    * remove upstreamed 0633-improve-displaymanager.patch
    * remove upstreamed 0637-fix-pdf-background-export.patch
    * remove upstreamed 0641-fix-font-handling.patch
    * remove upstreamed 0649-fix-pdf-export-scaling.patch
  - chore: replace qmake by cmake build system
    * remove 0651-chore-reorganize-linux-build.patch
    * add 0698-add-cmake-build-system.patch
  - fix: page size for PDF export
    * add 0677-pdf-export-page-size.patch
  - disable software update from openboard web page
    * add 9117-disable-software-update.patch


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
    OBS figure out the right packages that do not conlfict.


author: David Sommerseth <davids@openvpn.net> - 2.5.9-2
changelog:
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)


author: David Sommerseth <davids@openvpn.net> - 2.5.7-2
changelog:
  - Added additional upstream patch resolving BF-CBC issues (to be removed with 2.5.8)
    https://patchwork.openvpn.net/patch/2504/
  - Removed BF-CBC from the --data-ciphers list.  This is no longer available by default
    in OpenSSL 3.0


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 16.02-21.inferit
changelog:
  - Using libnatspec to correctly decode non-ASCII filenames zipped on Windows.
  - Rebuilt for MSVSphere 9.3


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 2.6.1-38
changelog:
  - Convert all code to Python 3 before the ability to use 2to3 goes away
  - Drop use of deprecated distutils, going away in Python 3.12
  - Get rid of a SyntaxWarning in test_random.py


author: Kalev Lember <klember@redhat.com> - 0.23.90-5
changelog:
  - Misc packaging cleanup
  - Sort BuildRequires and Requires and split them out one per line
  - Move GObject Introspection bindings to -gtk and -gtk-devel subpackages
  - Split libzbar out to zbar-libs subpackage
  - Tighten subpackage deps with %{_isa}
  - Drop manual requires on pkgconfig and rely on rpm dep extractor
  - Rename zbar-python3 to python3-zbar as per latest Python guidelines
  - Use make_build and make_install macros


author: Adam Williamson <awilliam@redhat.com> - 1:20211101-2
changelog:
  - Backport patch to fix thread dependency discovery
  - Substitute the pkgconfig file before installing it (#2038572)
  - Drop soname patches as upstream seems to be doing it properly now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.6.0-24
changelog:
  - F-36: rebuild against ruby31
  - modernize spec file, especially move %gem_install to %build
    to fix FTBFS with package_notes


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 1.9.6-2.inferit
changelog:
  - Revert Revert Follow system color-scheme for default theme-variant patch
    Too old GNOME 40
  - disable warning


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


author: Bojan Smojver <bojan@rexursive.com> - 1:0.9.21-1
changelog:
  - Bump up to 0.9.21
  - CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480
  - CVE-2022-23481 CVE-2022-23483 CVE-2022-23482 CVE-2022-23484 CVE-2022-23493


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


author: Orion Poplawski <orion@nwra.com> - 1:6.0.13-1
changelog:
  - Update to 6.0.13
  - Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
  - Add policy to allow zabbix agent to run rpm read-only


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.3.8-2
changelog:
  - merge https://src.fedoraproject.org/rpms/zathura-pdf-mupdf/pull-request/12
  - Remove upstreamed patch
  - Restore build with external libraries


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


author: wally <wally> 1.4.0-2.mga9
changelog:
  + Revision: 1926923
  - bump lib major to 2 due to API breakage (from Debian)
  - install BitArray.h header manually for libreoffice build


