# changelog

author: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
changelog:
  - Fix regression with touchpad on notebook Positron Proxima 15 and probably others (bz#19950)
  - https://bugzilla.rosa.ru/show_bug.cgi?id=19950


author: slava86 <s.matveev@rosalinux.ru>
changelog:
  - FAILED: obj/third_party/crabbyavif/libthird_uparty_scrabbyavif_ccrabbyavif.rlib
  - "/usr/bin/python3" "../../build/rust/gni_impl/rustc_wrapper.py" --rustc=../../../../../../usr/bin/rustc --depfile=obj/third_party/crabbyavif/libthird_uparty_scrabbyavif_ccrabbyavif.rlib.d --rsp=obj/third_party/crabbyavif/libthird_uparty_scrabbyavif_ccrabbyavif.rlib.rsp -- -Clinker="/opt/llvm21/bin/clang++" --crate-name third_uparty_scrabbyavif_ccrabbyavif ../../third_party/crabbyavif/src/src/lib.rs --crate-type rlib -Zallow-features=sanitize --cfg=feature=\"dav1d\" --cfg=feature=\"libyuv\" --cfg=feature=\"capi\" --cfg=feature=\"disable_cfi\" --edition=2021 -Dunsafe_op_in_unsafe_fn -Cforce-unwind-tables=no -Crelocation-model=pic -Zsplit-lto-unit -Clinker-plugin-lto=yes -Cdefault-linker-libraries -Zdep-info-omit-d-target -Zmacro-backtrace -Zremap-cwd-prefix=. -Zexternal-clangrt --color=always --target=x86_64-unknown-linux-gnu -Ccodegen-units=1 --cfg cr_rustc_revision=\"rustc\ 1.90.0\ \(1159e78c4\ 2025-09-14\)\ \(built\ from\ a\ source\ tarball\)\" -Copt-level=3 -Clinker-plugin-lto=yes -Zdefault-visibility=hidden --emit=dep-info=obj/third_party/crabbyavif/libthird_uparty_scrabbyavif_ccrabbyavif.rlib.d,link -o obj/third_party/crabbyavif/libthird_uparty_scrabbyavif_ccrabbyavif.rlib LDFLAGS RUSTENV OUT_DIR=../../../../out/Release/gen/third_party/crabbyavif/crabbyavif
  - error: cannot find attribute `sanitize` in this scope
  --> ../../third_party/crabbyavif/src/src/capi/io.rs:210:41
  - |
  - 210 |     #[cfg_attr(feature = "disable_cfi", sanitize(cfi = "off"))]
  - |                                         ^^^^^^^^
  - error: cannot find attribute `sanitize` in this scope
  --> ../../third_party/crabbyavif/src/src/reformat/libyuv.rs:836:37
  - |
  - 836 | #[cfg_attr(feature = "disable_cfi", sanitize(cfi = "off"))]
  - |                                     ^^^^^^^^
  - error: cannot find attribute `sanitize` in this scope
  --> ../../third_party/crabbyavif/src/src/reformat/libyuv.rs:375:37
  - |
  - 375 | #[cfg_attr(feature = "disable_cfi", sanitize(cfi = "off"))]
  - |                                     ^^^^^^^^
  - error[E0635]: unknown feature `sanitize`
  --> ../../third_party/crabbyavif/src/src/lib.rs:16:46
  - |
  - 16 | #![cfg_attr(feature = "disable_cfi", feature(sanitize))]
  - |                                              ^^^^^^^^
  - error: aborting due to 4 previous errors
  - For more information about this error, try `rustc --explain E0635`.


author: slava86 <s.matveev@rosalinux.ru>
changelog:
  - ../../components/viz/host/gpu_host_impl.cc -o obj/components/viz/host/host/gpu_host_impl.o
  - ../../components/viz/host/gpu_host_impl.cc:30:10: fatal error: 'gpu/webgpu/dawn_commit_hash.h' file not found
  - 30 | #include "gpu/webgpu/dawn_commit_hash.h"
  - |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  - 1 error generated.


author: Mikhail Novosyolov <m.novosyolov@rosalinux.ru> 1.1.1w-2
changelog:
  - Fix loading engines without lib64z-devel
  - openssl tried to dlopen libz.so, but symlink libz.so -> libz.so.1 is in the devel package.
  - Link to libz instead of dlopenning it.
  - ```
  - $ openssl engine gost -c
  - (gost) Reference implementation of GOST engine
  - [gost89, gost89-cnt, gost89-cnt-12, gost89-cbc, grasshopper-ecb, grasshopper-cbc, grasshopper-cfb, grasshopper-ofb, grasshopper-ctr, magma-cbc, magma-ctr, id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm, md_gost94, gost-mac, md_gost12_256, md_gost12_512, gost-mac-12, magma-mac, grasshopper-mac, id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac, gost2001, gost-mac, gost2012_256, gost2012_512, gost-mac-12, magma-mac, grasshopper-mac, id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac, id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac]
  - 140031570392448:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:crypto/dso/dso_dlfcn.c:118:filename(libz.so): libz.so: cannot open shared object file: No such file or directory
  - 140031570392448:error:25070067:DSO support routines:DSO_load:could not load the shared library:crypto/dso/dso_lib.c:162:
  - ```


author: HisShadow <shadowpilot34@gmail.com> 1.5.1-8
changelog:
  - static analyzer: fix various issues
  - This backports 5 commits from upstream:
  - Backports 8d082da1bc993b5b061ae81a9743891328e04ce6 from upstream
  - Backports b8429cc8036cd23d075174d13eedc6d857e2b454 from upstream
  - Backports bf9ebc84c091f9f2d018aac2f9c2c4c4933e319e from upstream
  - Backports c12a2d00cc560ebdacc53bcedb6ee882baba5b1f from upstream
  - Backports 81d5593e32ef06e749ab8c591111d37b95c42e01 from upstream


author: Mikhail Novosyolov <m.novosyolov@rosa.ru>
changelog:
  - Add sconfigs-enable-pti subpackage
  - This package adds pti=on to kernel cmdline via GRUB_CMDLINE_LINUX_DEFAULT,
  - enabling Kernel Page Table Isolation (KPTI) which mitigates the Meltdown
  - vulnerability (CVE-2017-5754) and prevents ret2usr attacks.
  - Co-authored-by: Z.AI GLM


author: Mikhail Novosyolov <m.novosyolov@rosa.ru>
changelog:
  - Add sconfigs-disable-kexec-load subpackage
  - This package adds kernel.kexec_load_disabled=1 sysctl which disables
  - the kexec_load() syscall. This syscall can be used by an attacker
  - to replace the kernel image and break the trusted boot chain.
  - Co-authored-by: Z.AI GLM


author: Mikhail Novosyolov <m.novosyolov@rosa.ru>
changelog:
  - Add sconfigs-disable-tsx subpackage
  - This package adds tsx=off to kernel cmdline via GRUB_CMDLINE_LINUX_DEFAULT,
  - disabling Intel TSX which is vulnerable to TSX Asynchronous Abort
  - (TAA, CVE-2019-11135).
  - Co-authored-by: Z.AI GLM


author: Mikhail Novosyolov <m.novosyolov@rosa.ru>
changelog:
  - Add sconfigs-disable-ptrace subpackage
  - This package sets kernel.yama.ptrace_scope=3 which completely
  - disables ptrace() for non-root processes, preventing attackers
  - from hijacking sessions and injecting code.
  - This will break debugging/tracing tools like gdb, strace, ltrace.
  - Co-authored-by: Z.AI GLM


author: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
changelog:
  - rosa2021.1: restore old desktop files for current platform after merge from rosa13
  - This partially reverts commit ba459b216df9be1e7330699efae281841787ec07.


author: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
changelog:
  -lm is already in upstream
  - https://pagure.io/usermode/c/6531295911ef476f494fff7a13a3596f79133210?branch=master


