# changelog

author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-1
changelog:
  - update to xen 4.20.1
    remove old qemu code for spac file
    remove armv7hl and ix86 code from spec file
    update configuration in xen.hypervisor.config 
    minios is now a separate file
    package extra ocaml files
    unset -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 for hypervisor build
    rebase xen.efi.build.patch
    includes fixes for security vulnerabilites
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
  	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-5
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
  	CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
  	CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.45-1
changelog:
  - xkeyboard-config 2.45
    xkeyboard-config changed from /usr/share/X11/xkb to /usr/share/xkeyboard-config-2/,
    with the same contents and the old location symlinked to the new one.
    Add a pretrans script to move the old location to the new one to stick with the
    upstream packaging approach.


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.2.6-1
changelog:
  - "Update to 1.2.6" * Fixed compass outline drawing * Exposed selected text
    to the windowing system Details on [release
    notes](https://github.com/xournalpp/xournalpp/releases/tag/v1.2.6)


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


