# changelog

author: Paul Howarth <paul@city-fan.org> - 3.04-13
changelog:
  - Fix decryption of ciphertext created with 'header' => 'randomiv'
    https://bugzilla.redhat.com/show_bug.cgi?id=2235322
    https://github.com/lstein/Lib-Crypt-CBC/issues/6
    https://github.com/lstein/Lib-Crypt-CBC/pull/7


author: Paul Howarth <paul@city-fan.org> - 3.07-1
changelog:
  - Update to 3.07 (rhbz#2383870)
    - New upstream maintainer
    - Fix CVE-2025-2814 by using Crypt::URandom
    - Fix decryption of ciphertext created with 'header' => 'randomiv'
    - Fixed bug in which manually-specified key and -pkdf=>"none" was not having
      any effect
    - Converted build process to Dist::Zilla
    - Miscellaneous minor Dist::Zilla related changes
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org to skip a
    redirect
  - Package new LICENSE, SECURITY.md and vulnerabilities.txt files


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-4
changelog:
  - Allow procfs 0.17, which 7, and roxmltree 0.20
  - https://github.com/nushell/nushell/pull/14489
  - https://github.com/nushell/nushell/pull/14513


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3006.12-1
changelog:
  - Updated to 3006.12
  - Resolves CVE-2024-38822 RHBZ#2372754
  - Resolves CVE-2024-38823 RHBZ#2372743
  - Resolves CVE-2024-38824 RHBZ#2372729
  - Resolves CVE-2024-38825 RHBZ#2372749
  - Resolves CVE-2025-22236 RHBZ#2372771
  - Resolves CVE-2025-22237 RHBZ#2372770
  - Resolves CVE-2025-22238 RHBZ#2372769
  - Resolves CVE-2025-22239 RHBZ#2372730
  - Resolves CVE-2025-22240 RHBZ#2372742
  - Resolves CVE-2025-22241 RHBZ#2372737
  - Resolves CVE-2025-22242 RHBZ#2372739


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


