# changelog

author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Eduardo Echeverria <echevemaster@gmail.com> - 1.11-1
changelog:
  - Update to 1.11. Fixes rhbz#2502800
  - Added automatic, crash-safe migration of persisted databases to storage
    format version 3
  - Added configured zlib and AddressSanitizer options to the version output
  - Added fullscreen expand and collapse controls to geolocation maps in the
    HTML report
  - Added Traditional Chinese translation
  - Expanded Debian package builds to Ubuntu 26.04 and additional
    architectures, and updated the packaging workflow actions
  - Fixed a heap buffer overflow when parsing malformed Opera user agents
  - Fixed an infinite loop while writing log parsing errors from multiple
    input files
  - Fixed city lookups ignoring the City database when a Country database was
    listed first
  - Fixed geolocation maps appearing grey after restoring persisted city data
  - Fixed .gz file extensions being interpreted as macros in the man page
  - Fixed iOS version parsing from user-agent strings
  - Fixed unique visitor undercounting caused by collisions between reversed
    data and visitor key pairs
  - Fixed WebSocket payload size checks for large and fragmented messages
  - Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
    browser category
  - Reduced storage memory usage by about 20% and parsing time by about 35%


author: Paul Howarth <paul@city-fan.org> - 3.3.122-1
changelog:
  - Update to 3.3.122
    - Buffer warning fix in fstVcdIDForFwrite
    - Warning fixes in vzt_read.c and fstapi.c
    - Prototype fixes for port to gcc15
    - Fixes for tcl9 compatibility
    - Added fixes for --saveonexit command line option
    - Fix for convert_real for TR_REAL traces
    - Fix for popen_san() in vcd2fst using fsdb binaries
    - Added fstWriterGetFlushContextPending() to fstapi.c/.h
    - Reenable wayland code for primary and baseline markers in wavewindow.c
    - Unnamed scope fix for fstReader
    - Opaque pointer warning fix for fstapi.c
    - Remove broken pseudo-2D array support in fst.c
    - Fix in fst.c for signals whose MSB/LSB/len mismatch
    - libfst #15: fstReaderOpen should not fail on empty FST file
    - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
      "Fix case of missing newline at EOF for VCD loaders"
    - Fix fstminer not handling string transitions correctly (GH#423)
    - Fix in fst.c for duplicate string values
    - Remove duplicate string values from adjacent value changes
    - libghw: Add from upstream for ghdl_rtik_type_i64
    - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
      (GH#428)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 3.3.123-1
changelog:
  - Update to 3.3.123
    - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
      3.3.122 introduced
    - Fix improper autocoalesce of adjacent duplicate symbols
    - Preserve dimension on integer array element when expanded


author: Paul Howarth <paul@city-fan.org> - 3.3.124-1
changelog:
  - Update to 3.3.124
    - Ensure type name in $var for VCD saver is >0 length
    - Preserve bitblasted vector ordering with VCD saver.
    - Use full type names in VCD saver instead of abbreviations
    - Dump all bits for a bitblasted vector in VCD saver in order to ensure
      stray bit extractions do not cause a failure to reconstruct vectors in
      proper order in the extracted file


author: Paul Howarth <paul@city-fan.org> - 3.3.125-1
changelog:
  - Update to 3.3.125
    - Added json2stems to distribution to support newer versions of Verilator
    - VCD parser fix for colon in VCD variable name
    - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
      converts 0 size signals to reals
    - Update vcd2fst so that it handles MTI 0 size conversion


author: Paul Howarth <paul@city-fan.org> - 3.3.126-1
changelog:
  - Update to 3.3.126
    - Added -H --noheader command line option for GTK3
    - Added headerbar rc variable to disable GTK3 headerbars
    - Fix for rendering multiline string constants in dumps
    - Add warning message for missing XPM loader
    - Updated libghw to current version
    - Changed behaviour of X search in pattern search so it is matched by a
      single X bit


author: Paul Howarth <paul@city-fan.org> - 3.3.127-1
changelog:
  - Update to 3.3.127
    - Fix for fixed point shift that does not disable it on the specify value
      change menu option
    - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
    - Warnings fix in vcd2fst for missing string.h include
    - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
      (gtkwave/libfst#17)
    - Wrote replacement for gdk_pixbuf_new_from_xpm_data
    - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
      FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
    - Added "SV_ST_ARRAY" to exclude file parsing on init
    - Fix use after free of GLOBALS->entrybox_text in regexp_highlight_generic()
  - Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Filipe Rosset <filiperosset@fedoraproject.org> - 5.4.3-1
changelog:
  - update to 5.4.3 fixes rhbz#2492868
  - a bunch of other bugs were fixed and will be backported to all supported
    Fedora / EPEL versions


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


