# changelog

author: Packit <hello@packit.dev> - 1:7.1.1.43-1
changelog:
  - Update to version 7.1.1.43
  - Resolves: rhbz#2334042
  - Fix files of ImageMagick-heic in 2 sub-packages (#2330605)


author: Tom Callaway <spot@fedoraproject.org> - 1.4.0-0.50.rc5
changelog:
  - apply two fixes from gentoo
  - fix aalib to handle opaque WINDOW in ncurses
  - fix license tag
  - fix patch macro syntax
  - fixes FTBFS


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.6.0-1
changelog:
  - Release 1.6.0
  - Updated angie-module-auth-jwt to 0.7.0
  - Updated angie-module-auth-ldap to 241200eac8e4acae74d353291bd27f79e5ca3dc4
  - Updated angie-module-jwt to 3.4.1
  - Updated angie-module-keyval to 0.3.0
  - Updated angie-module-njs to 0.8.5


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.6.1-1
changelog:
  - Release 1.6.1
  - Updated angie-module-opentracing to v0.35.3
  - Updated angie-module-zstd to f4ba115e0b0eaecde545e5f37db6aa18917d8f4b


author: Release Engineering Team <devops@tech.wbsrv.ru> - angie-1.8.0-1
changelog:
  - Release 1.8.0
  - Added angie-module-http-auth-radius
  - Updated angie-module-auth-jwt to 0.8.0
  - Updated angie-module-jwt to v3.4.2
  - Updated angie-module-njs to 0.8.8
  - Updated angie-module-opentracing to v0.38.0
  - Updated angie-module-wasm to v0.1-beta5


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 1.8.1-2
changelog:
  - Fix ModSecurity detection
  - Updated angie-module-auth-spnego to v1.1.2
  - Updated angie-module-headers-more to v0.38
  - Updated angie-module-lua to 0.10.28
  - Updated angie-module-njs to 0.8.9
  - Updated angie-module-vts to v0.2.3
  - Updated angie-module-wasm to v0.2-beta2


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Dominik Mierzejewski <rpm@greysector.net> - 3.9.0-1
changelog:
  - update to 3.9.0 (resolves rhbz#2169134)
  - drop obsolete patch
  - cmake files are no longer installed when building with autotools
  - enable eigen3 tests (64-bit only, not enough memory on 32-bit)


author: Dominik Mierzejewski <rpm@greysector.net> - 3.9.1-1
changelog:
  - update to 3.9.1 (#2244208, #2241361)
  - drop obsolete patch
  - run tests sequentially to work around upstream bug


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 140.0.7339.207-1.inferit
changelog:
  - Update to 140.0.7339.207
    * CVE-2025-10890: Side-channel information leakage in V8
    * CVE-2025-10891: Integer overflow in V8
    * CVE-2025-10892: Integer overflow in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 141.0.7390.54-1
changelog:
  - Update to 141.0.7390.54
    * High CVE-2025-11205: Heap buffer overflow in WebGPU
    * High CVE-2025-11206: Heap buffer overflow in Video
    * Medium CVE-2025-11207: Side-channel information leakage in Storage
    * Medium CVE-2025-11208: Inappropriate implementation in Media
    * Medium CVE-2025-11209: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11210: Side-channel information leakage in Tab
    * Medium CVE-2025-11211: Out of bounds read in Media
    * Medium CVE-2025-11212: Inappropriate implementation in Media
    * Medium CVE-2025-11213: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11215: Off by one error in V8
    * Low CVE-2025-11216: Inappropriate implementation in Storage
    * Low CVE-2025-11219: Use after free in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 141.0.7390.107-1
changelog:
  - Update 141.0.7390.107
    * High CVE-2025-11756: Use after free in Safe Browsing
  - remove enable-native-gpu-memory-buffers by default as it causes glitches


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 142.0.7444.59-1.inferit
changelog:
  - Update to 142.0.7444.59
    * Refreshed ppc64le patches
    * Refreshed system-brotli patch
    * Refreshed clang++-unknown-argument patch
    * Refreshed split-threshold-for-reg-with-hint patch
    * Fixed some FTBFS caused by missing header files
    * Fixed FTBFS caused by old rust compiler
    * Fixed FTBFS caused by new glibc-2.42 in Rawhide
    * Fixed FTBFS caused by old python-3.9.x in EL8/9
    * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 142.0.7444.134-1.inferit
changelog:
  - Update to 142.0.7444.134
   * High CVE-2025-12725: Out of bounds write in WebGPU
   * High CVE-2025-12726: Inappropriate implementation in Views
   * High CVE-2025-12727: Inappropriate implementation in V8
   * Medium CVE-2025-12728: Inappropriate implementation in Omnibox


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 142.0.7444.175-1.inferit
changelog:
  - Update to 142.0.7444.175
    * High CVE-2025-13223: Type Confusion in V8
    * High CVE-2025-13224: Type Confusion in V8


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
    * High CVE-2025-13630: Type Confusion in V8
    * High CVE-2025-13631: Inappropriate implementation in Google Updater
    * High CVE-2025-13632: Inappropriate implementation in DevTools
    * High CVE-2025-13633: Use after free in Digital Credentials
    * Medium CVE-2025-13634: Inappropriate implementation in Downloads
    * Medium CVE-2025-13720: Bad cast in Loader
    * Medium CVE-2025-13721: Race in v8
    * Low CVE-2025-13635: Inappropriate implementation in Downloads
    * Low CVE-2025-13636: Inappropriate implementation in Split View
    * Low CVE-2025-13637: Inappropriate implementation in Downloads
    * Low CVE-2025-13638: Use after free in Media Stream
    * Low CVE-2025-13639: Inappropriate implementation in WebRTC
    * Low CVE-2025-13640: Inappropriate implementation in Passwords
  - Set gtk version to 3 by default
  - Backport Wayland DnD bug fix from upstream


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
    * High: Under coordination
    * Medium CVE-2025-14372: Use after free in Password Manager
    * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them unreadable
  - Backport Wayland Omnibox bug fix from upstream
  - Enable gtk4 by default (EL10)


author: Arkady L. Sname <tigro@msvsphere-os.ru> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 140.0.7339.185-1.inferit
changelog:
  - Update to 140.0.7339.185
    * CVE-2025-10585: Type Confusion in V8
    * CVE-2025-10500: Use after free in Dawn
    * CVE-2025-10501: Use after free in WebRTC
    * CVE-2025-10502: Heap buffer overflow in ANGLE

  - Update to 140.0.7339.127
    * CVE-2025-10200: Use after free in Serviceworker
    * CVE-2025-10201: Inappropriate implementation in Mojo


author: Jens Petersen <petersen@redhat.com> - 0.30.2-1
changelog:
  - https://github.com/commonmark/cmark/releases/tag/0.30.2
  - disable static library via cmake (rhbz#2161688)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.7.29-1
changelog:
  - Update to v1.7.29
  - Resolves: GHSA-pwhc-rpq9-4c8w (CVE-2024-25621)
  - Resolves: GHSA-m6hq-p25p-ffr2
  - Resolves: rhbz#2352144, rhbz#2398401, rhbz#2407587, rhbz#2408565
  - Resolves: rhbz#2409042, rhbz#2409990, rhbz#2410922, rhbz#2412519
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0:1.29.4-1
changelog:
  - Bump to v1.29.4
  - Resolves CVE-2024-3154, a security flaw where CRI-O allowed users to specify annotations that changed specific fields in the runtime.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0:1.32.0-1
changelog:
  - Bump to v1.32.0
  - Add -Wl,-z,undefs linker flags to resolve https://github.com/cri-o/cri-o/issues/8860
  - Update BUILDTAGS to conform to upstream


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.30.10-1
changelog:
  - Update to release v1.30.10
  - Upstream fixes
  - Merge spec template changes from v1.31. Modifies GO_LDFLAGS to only
    include dynamic variable (buildDate). All other git related attributes
    ignored upstream.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.30.14-1
changelog:
  - Update to release v1.30.14
  - Upstream fix
  - Update .gitignore to include fedpkg artifacts
  - Remove containerd related override as it triggers build fault
  - Update license expression


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.13-1
changelog:
  - Update to release v1.31.13
  - Resolves: rhbz#2333357, rhbz#2398406, rhbz#2398661, rhbz#2399063,
    rhbz#2399337
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-1
changelog:
  - Update to release 1.32.9
  - Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064,
    rhbz#2399338
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-1
changelog:
  - Update to release v1.33.5
  - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,
    rhbz#2399065, rhbz#2399339
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-1
changelog:
  - Update to release v1.34.1
  - Resolves: rhbz#2333357, rhbz#2398409, rhbz#2398664, rhbz#2399066,
    rhbz#2399340
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.30.1-4
changelog:
  - Resolve cve-2024-45338
  - Updates golang/x/net to v0.33. to resolve potential cve-2024-45338 issue
  - Change to trivy license detector


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.1-4
changelog:
  - Resolve rhbz#2352150
  - Resolve: rhbz#2352150
  - Change license scan to scancode for consistent scan across Fedora
    releases


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.1-5
changelog:
  - Revert to trivy license scan
  - Enable trivy for license scan.
  - Consistent across all current cri-tools1.32, cri-tools1.31, cri-tools1.30
    packages


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.0-1
changelog:
  - Initial v1.33.0 feature complete commit
  - Initial v1.33.0 commit (rhbz#2361582, rhbz#2361583, rhbz#2361584)
  - New features and fixes


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 1.9.6-4.inferit
changelog:
  - Added Russian description for ArcMenu
  - Revert politial remove of Russian support
  - Drop inappropriate symbols


author: Xavier Bachelot <xavier@bachelot.org> - 3.5.28-12
changelog:
  - Do not BuildRequires: inkscape on EL10
  - Sort BuildRequires:
  - Use %make_build, %make_install and %license macros
  - Improve %files section


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Simone Caronni <negativo17@gmail.com> - 1.22.15-3
changelog:
  - Clean up SPEC file.
  - Adjust Requires and BuildRequires.
  - Update configure options.
  - Fix all tests except one.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 3.5.13-1
changelog:
  - Update to 3.5.13 - Closes rhbz#2225797 rhbz#2171486 rhbz#2170782
    rhbz#2236640 rhbz#2243321 rhbz#2248266 rhbz#2251230


author: Sérgio Basto <sergio@serjux.com> - 1.35.1-1
changelog:
  - Update to 1.35.1
  - Update to version 1.35 (Wed Jun 05 2024 Packit <hello@packit.dev>)
  - Resolves: rhbz#2290632


author: Nicolas Chauvet <kwizart@gmail.com> - 7.1.1-9
changelog:
  - Switch to OpenCL-ICD-Loader-devel
  - Backport configure-rename-POSIX-ioctl-check
  - Add missing default BR


author: Sandro <devel@penguinpee.nl> - 3.0.23-5
changelog:
  - Apply security patches
  - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288)
  - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292)
  - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296)


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.0-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with patch from Gentoo


author: Dominic Hopf <dmaphy@fedoraproject.org> - 2.1-2
changelog:
  - New upstream release: Geany 2.1 (RHBZ#2376572)
  - Remove gcc15 patch
  - Introduce Obsoletes for geany-themes


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.1-6
changelog:
  - re-enable zlib and nvdec
  - fix build with zlib-ng
  - fix building nvdec on aarch64
  - fix OSS audio disablement
  - enable Nghttp2 support
  - list manpages and libraries explicitly
  - clean up, avoid using rm -f


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.1-7
changelog:
  - switch to standard %bcond_* macros
  - build without FAAD2 by default
  - use SPDX license identifier
  - update URL


author: Dominik Mierzejewski <dominik@greysector.net> - 2.4.0-3
changelog:
  - drop unused build dependency on libfreenect (it's never enabled even if
    detected, see https://github.com/gpac/gpac/issues/1494)
  - jack support builds fine on EPEL9, too, so drop the conditional
  - use upstream URL for accepted patch


author: Jerry James <loganjerry@gmail.com> - 2.7.1-11
changelog:
  - Verify the source tarball
  - Stop converting THANKS to UTF-8; it already is
  - Minor spec file cleanups


author: Sergey Cherevko <s.cherevko@msvsphere.ru> - 0.20.0-1.inferit.1
changelog:
  - Fixed the launch of the keyboard system settings
  - Adapted spec for MSVSphere
  - Rebuilt for MSVSphere 9.2


author: Dominik Mierzejewski <dominik@greysector.net> - 1.16.2-2
changelog:
  - Enable uncompressed codec (rhbz#2237849)
  - Run tests conditionally (requires making all symbols visible)
  - Disable HEVC tests when building without HEVC codec


author: Dominik Mierzejewski <dominik@greysector.net> - 1.17.5-2
changelog:
  - Update to 1.17.5 (rhbz#2244583)
  - Backport fixes for: CVE-2023-49460 (rhbz#2253575, rhbz#2253576)
                        CVE-2023-49462 (rhbz#2253567, rhbz#2253568)
                        CVE-2023-49463 (rhbz#2253565, rhbz#2253566)
                        CVE-2023-49464 (rhbz#2253562, rhbz#2253563)
  - Simplify conditionals for rav1e and svt-av1 encoders
  - Enable JPEG2000 and dav1d decoders/encoders


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Kevin Fenzi <kevin@scrye.com> - 1.2.0-2
changelog:
  - Enable SSL during install ( thanks Tom Briden <tom.briden@eckoh.com> )
  - Install SSL library and headers ( thanks Tom Briden <tom.briden@eckoh.com> )
  - Fixes rhbz#2266018


author: Jan Kratochvil <jan@jankratochvil.net> - 4.23.9.0-3
changelog:
  - Fix memory corruption with too many arguments
    https://bugzilla.redhat.com/show_bug.cgi?id=2345921
  - Use %autosetup


author: Kalev Lember <kalevlember@gmail.com> - 1:1.41.0-1
changelog:
  - Update to 1.41.0
  - Build with llvm 20
  - Re-bootstrap on ppc64le to switch to 128-bit IEEE long double ABI


author: Xavier Bachelot <xavier@bachelot.org> - 0.17.2-1
changelog:
  - Update to 0.17.2 (RHBZ#2281493)
  - Add upstream patches to fix %check
  - Add optional dependency on libunibreak


author: Filip Janus <fjanus@redhat.com> - 5.3.25-57
changelog:
  - Add convert-util subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Disable shiping libdb for rhel except convert-tool


author: Dominik Mierzejewski <dominik@greysector.net> - 1.4.4-3
changelog:
  - switch to plain cmake in dependencies and macros (resolves: rhbz#1731694)
  - use better glob for shared library
  - drop obsolete ldconfig_scriptlets macro
  - fix deprecated patchN macro usage


author: Dominik Mierzejewski <dominik@greysector.net> - 1.4.5-1
changelog:
  - update to 1.4.5 (#2254413)
  - fixes CVE-2023-52339 (#2258046, #2258047)
  - use SPDX identifier in License field


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.1-18
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: wally <wally> 5.3.5-1.mga10
changelog:
  + Revision: 2024685
  - new version 5.3.5
  + daviddavid <daviddavid>
  - rebuild for new jsoncpp 1.9.5
  - rebuild for new zxing-cpp 2.1.0


author: wally <wally> 5.3.5-2.mga10
changelog:
  + Revision: 2024993
  - force jsoncpp req via cmake
  - force system xsd
  - drop unmaintained pkg-conf .pc files


author: Dominik Mierzejewski <dominik@greysector.net> - 1.7.1-3
changelog:
  - switch to plain cmake in dependencies and macros (resolves: rhbz#1731695)
  - use better glob for shared library
  - drop obsolete ldconfig_scriptlets macro
  - make libebml-devel dependency archful


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-22
changelog:
  - adopt for Fedora
  - hard-code ABI SONAME to avoid inadvertent breaks
  - use SPDX identifier
  - fix spurious executable permission
  - drop redundant configure flag


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-24
changelog:
  - add explicit build dependencies
  - use a modern pkgconf runtime dependency
  - annotate upstream patch origin


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Peter Fordham <peter.fordham@gmail.com> - 0.8.0-3
changelog:
  - Patch in fix from upstream for C99 compatibilty issue with strdup in test.
    https://github.com/HOST-Oman/libraqm/commit/3f50e35d239059823162cbfba3c7adfe8e5f1907


author: Lukas Javorsky <ljavorsk@redhat.com> - 5.1.0-3
changelog:
  - Rebuilt for minizip-ng transition Fedora change
  - Fedora Change: https://fedoraproject.org/wiki/Changes/MinizipNGTransition


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Sandro <devel@penguinpee.nl> - 6.1-1
changelog:
  - Update to 6.1 (RHBZ#2266204)
  - Update script for downloading test data
  - Store test data in side cache (instead of dist-git)
  - Rebase patches and drop no longer required patch
  - Use glob in .gitignore


author: Tom Callaway <spot@fedoraproject.org> - 1.7.0-0.1.rc2
changelog:
  - update to 1.7.0-rc2
  - disable tests on s390x (reported upstream: https://github.com/libunwind/libunwind/issues/464)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2024.09.20-1
changelog:
  - update to 2024.09.20 (resolves rhbz#2283876)
  - bump libliveMedia.so ABI to 114
  - fix "file listed twice" rpmbuild warning


author: Simone Caronni <negativo17@gmail.com> - 1.18.10-1
changelog:
  - Update to 1.18.10.
  - Delete very old macro and provides/obsoletes definitions. We don't have any
    of those versions anymore in any non-EOL release.
  - Trim changelog.
  - Drop examples that require GTK2.
  - Remove %pretrans lua scriptlet, required only when going from el8 to el9.


author: Mads Kiilerich <mads@kiilerich.com> - 6.8-4
changelog:
  - Exclude threading from demandimport. That became a problem with recent
    "stable" cpython changes. (#2299346)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.3-10
changelog:
  - use systemctl try-restart in postrotate script (resolves rhbz#2372859)
  - attempt to fix CVE-2023-47430 (resolves rhbz#2271621)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.0.10-5
changelog:
  - Fix unzLocateFile incompability (upstream commit)
  - Fix zip_fileinfo incompability (upstream commit)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.3.1-3
changelog:
  - Add Mozilla plugin path to MOZ_GMP_PATH instead of overriding unconditionally
  - Resolves: rhbz#2225112


author: Kalev Lember <klember@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Update gstreamer plugin to 1.22.7
  - Obsolete noopenh264 stub package
  - Use SPDX license identifiers


author: Sérgio Basto <sergio@serjux.com> - 0.40.0-1
changelog:
  - Update mpv to 0.40.0
  - filesystem package owns completions folders, no need to co-own
    these directories anymore


author: Alain Vigne <avigne@fedoraproject.org> 1.3.3-2
changelog:
  - Install the shared library instead of default static one. Solve RHBZ#2241358
  - Add a -static subpackage


author: Michael J Gruber <mjg@fedoraproject.org> - 1.25.2-1
changelog:
  - rebase to 1.25.2 (rhbz#2309092)
  - various fixes all across the board
  - enhanced redaction, structured text and annotation features
  - new tool "mutool audit" to create summary of PDF file composition


author: Kalev Lember <klember@redhat.com> - 0.1.0~openh264_2.3.1-1
changelog:
  - Switch to using upstream openh264-2.3.1 tag
  - Make sure the matching openh264 version is listed as part of the rpm
    version tag
  - Stop using forge macros to get better control over the version and
    release tags


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.4-1
changelog:
  - updated to 2.8.4 (#2387244)
  - rename rhino to nutdrv_rhino to prevent file conflict (rhbz#2367057)


author: Jerry James <loganjerry@gmail.com> - 1.9.8-1
changelog:
  - OCaml 5.2.1 rebuild for Fedora 41
  - Version 1.9.8
  - Drop workaround for upstream dynlink_subdir bug
  - Change config name to findlib.conf to match upstream


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Eduard Basov <ebasov@msvsphere-os.ru> - 2.3.0-1.inferit.2
changelog:
  - Creating a config in the directory /etc/xdg/pcmanfm-qt/lxqt/settings.conf, if the config does not appear there, then a default config is created in .config/pcmanfm-qt/lxqt, which breaks all our settings


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Xavier Bachelot <xavier@bachelot.org> - 0.083-1
changelog:
  - Update to 0.083 (RHBZ#2310725)
  - Drop EL7 support
  - Fix Math::BigInt/BigFloat versions and conditionals


author: Paul Howarth <paul@city-fan.org> - 2.79-1
changelog:
  - Update to 2.79
    - Improve image type autodetection (CPAN RT#153212) and add a test
    - Fix Avif without Heif config
    - Improve gdlib.pc reader for supported library features


author: Paul Howarth <paul@city-fan.org> - 2.80-1
changelog:
  - Update to 2.80
    - Fix broken copyTranspose and copyReverseTranspose (CPAN RT#153300)
    - Add transformation tests
    - Fix wrong WBMP name and detection
    - Fix wrong filename extension auto-detection for gd, gd2, wbmp
    - Fix wrong filename extension auto-detection for xpm; newFromXpm needs the
      filename, not handle
    - Fix wrong libgd doc link (GH#52)


author: Paul Howarth <paul@city-fan.org> - 2.81-1
changelog:
  - Update to 2.81
    - Change GD::Polygon::transform to match old demos (CPAN RT#140043) and
      GD::Polyline
    - Add GD::Polygon::rotate(cw-radian) helper
    - Allow GD::Polygon::scale(2.0)


author: Paul Howarth <paul@city-fan.org> - 2.82-1
changelog:
  - Update to 2.82
    - Improve HEIF/AVIF autodetection (CPAN RT#153305)
    - Fix Strawberry Perl default libgd path (GH#54)
    - Fix AVIF and Webp autodetection in tests (GH#54)


author: Paul Howarth <paul@city-fan.org> - 2.83-1
changelog:
  - Update to 2.83
    - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
      but gdlib-config (the check was too strict)


author: Michal Josef Špaček <mspacek@redhat.com> - 4.079-26
changelog:
  - Remove dependency to Socket6, which we are going to remove.
    They are used own implementations of inet_pton and inet_ntop in this situation.


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Skip quote-separator tests on newer perls that deprecate this behavior
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64 (rhbz#2270204)
    - This is a maintenance release; the code contains no functional change
    - Contributing guidelines are now listed in the new CONTRIBUTING file
    - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)
  - Use %{make_build} and %{make_install}
  - Make %files list more explicit


author: Xavier Bachelot <xavier@bachelot.org> - 19-45
changelog:
  - Add conditional for {pipewire-,}jack-audio-connection-kit-devel
  - Narrow scope of globs for .so/.pc


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Marie Loise Nolden <loise@kde.org> - 6.8.2.1-2
changelog:
  - fix build due to 
    
    CFLAGS="${CFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -mbranch-protection=standard -fasynchronous-unwind-tables    }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -mbranch-protection=standard -fasynchronous-unwind-tables    }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -mbranch-protection=standard -fasynchronous-unwind-tables    -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -mbranch-protection=standard -fasynchronous-unwind-tables    -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now --config=/usr/lib/rpm/redhat/redhat-hardened-clang-ld.cfg  -flto=thin -ffat-lto-objects -Wl,--build-id=sha1  }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-clang}" ; export CC ; 
    CXX="${CXX:-clang++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON macro change after removal of -DLIB_SUFFIX in rawhide
  - prepare documentation build


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.9.1-0
changelog:
  - bootstrap epel10
  -  temporarily (or is it?) remove qt5 sub-package. Will epel10 get qt5?
  -  temporarily remove test w/ xvfb-run until I can figure out the
     proper replacement.
  -  inkscape seems to not be needed. Or am I wrong about that? It builds 
     without it as a BR. Will add it back when inkscape is built for EPEL10.


author: Steve Traylen <steve.traylen@cern.ch> - 1.3.2-1
changelog:
  - Update to version 1.3.2
  - Run tests with tox
  - Use rpmautospec changelog
  - Use forgeurl to get tox.ini file
  - Use more conventional pypi_macro for name
  - Use pyproject_macros
  - Mark license file as license


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Jan Grulich <jgrulich@redhat.com> - 6.8.2-3
changelog:
  - Rework OpenH264 support following Chromium package
  - Backport upstream change for ffmpeg codec selection issues.


author: Florian Weimer <fweimer@redhat.com> - 2.0.15-40
changelog:
  - Backport upstream patch to fix C compatibility issues
  - Backport another upstream patch to fix build issue with current libxml2


author: Timm Bäder <tbaeder@redhat.com> - 0.9.33-23
changelog:
  - Fix undefined printf() in configure check.
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Ondrej Pohorelsky <opohorel@redhat.com> - 3.7.14-1
changelog:
  - 3.7.14 bump
  - Adds upstream patch to prevent double free
  - Require python3-setuptools unconditionaly
  - Resolves: rhbz#2170818, rhbz#2166136


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Caolán McNamara <caolanm@redhat.com> - 1.0.17-33
changelog:
  - Resolves: rhbz#1788504 drop libdb dependency from redland
    note: rdfproc -s file of -s sqlite are potentially options


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Oleg Proskurin <proskur@altlinux.org> 0.3-alt1
changelog:
  - New features (Closes:#53303):
    + Dark themes support
    + Text search
    + Custom signature stamps
    + Custom annotation stamps
    + Transparent stamps support


author: Oleg Proskurin <proskur@altlinux.org> 0.3.2-alt1
changelog:
  - New features:
    + Open URLs by ctrl+click.
  Fixes (Closes: #54387, #54370, #55451):
    + SearchDialog and RubberStamp list positioning.
    + Aim-rectangle size for custom stamps.
    + The scroll bar that overlaps the buttons.
    + The flattening distortion of the rubber stamp preview.
    * The flattening distortion of the signature stamp.
    + The position of the rubber stamp preview image.
    + The position of the signature stamp preview image.
    + Tranlations update.
    + Multiple UI fixes for different desktop environments.


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-2
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
          CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Rebuild (xorg-x11-server)
    Fixes: CVE-2025-49175 / CVE-2025-49176 / CVE-2025-49177
           CVE-2025-49178 / CVE-2025-49179 / CVE-2025-49180


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Dominik Mierzejewski <dominik@greysector.net> - 0.164-13.20231001git31e19f92
changelog:
  - Fix "assignment from incompatible pointer type" errors on ppc64le
  - Use correct build dependency on bash-completion


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


