- 
    Tue Dec 21 2021 Matej Mužila <mmuzila@redhat.com> - 3.3.3-3
    
- Do not follow symlinks when processing the fixup list (CVE-2021-31566)
   
  
  - 
    Mon Dec 20 2021 Matej Mužila <mmuzila@redhat.com> - 3.3.3-2
    
- Fix handling of symbolic link ACLs (CVE-2021-23177)
   
  
  - 
    Thu Apr 30 2020 Ondrej Dubaj <odubaj@redhat.com> - 3.3.3-1
    
- Rebase to version 3.3.3
   
  
  - 
    Tue Mar 24 2020 Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-9
    
- Fix out-of-bounds read (CVE-2019-19221) (#1803967)
   
  
  - 
    Wed Jan 15 2020 Patrik Novotný <panovotn@redhat.com> - 3.3.2-8
    
- Fix CVE-2019-18408: RAR use-after-free
   
  
  - 
    Mon May 27 2019 Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
    
- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)
   
  
  - 
    Tue Apr 30 2019 Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-6
    
- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)
   
  
  - 
    Tue Apr 02 2019 Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-5
    
- release bump due to gating (#1680768)
   
  
  - 
    Fri Feb 22 2019 Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
    
- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)
   
  
  - 
    Wed Jul 18 2018 Pavel Raiskup <praiskup@redhat.com> - 3.3.2-3
    
- drop use of %ldconfig_scriptlets