# changelog

author: Than Ngo <than@redhat.com> - 139.0.20^chromium139.0.7258.66-1
changelog:
  - Updated to 139.0.7258.66
  - Asahi Lina: Update to cef-139.0.20+g60bd77d
  - * CVE-2025-8576: Use after free in Extensions
  - * CVE-2025-8578: Use after free in Cast
  - * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  - * CVE-2025-8580: Inappropriate implementation in Filesystems
  - * CVE-2025-8581: Inappropriate implementation in Extensions
  - * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  - * CVE-2025-8583: Inappropriate implementation in Permissions


author: Than Ngo <than@redhat.com> - 139.0.20^chromium139.0.7258.127-1
changelog:
  - Updated to 139.0.7258.127 (rhbz#2381869)
  - * CVE-2025-8879: Heap buffer overflow in libaom
  - * CVE-2025-8880: Race in V8
  - * CVE-2025-8901: Out of bounds write in ANGLE
  - * CVE-2025-8881: Inappropriate implementation in File Picker
  - * CVE-2025-8882: Use after free in Aura


author: Than Ngo <than@redhat.com> - 140.1.15^chromium140.0.7339.80-1
changelog:
  - Update to 140.0.7339.80 (rhbz#2396308)
  - * Update to cef-140.1.15+gfaef09b (rhbz#2380429) (Asahi Lina)
  - * CVE-2025-9864: Use after free in V8
  - * CVE-2025-9865: Inappropriate implementation in Toolbar
  - * CVE-2025-9866: Inappropriate implementation in Extensions
  - * CVE-2025-9867: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 140.1.15^chromium140.0.7339.127-1
changelog:
  - Update to 140.0.7339.127
  - * CVE-2025-10200: Use after free in Serviceworker
  - * CVE-2025-10201: Inappropriate implementation in Mojo


author: Than Ngo <than@redhat.com> - 140.1.15^chromium140.0.7339.185-1
changelog:
  - Update to 140.0.7339.185
  - * CVE-2025-10585: Type Confusion in V8
  - * CVE-2025-10500: Use after free in Dawn
  - * CVE-2025-10501: Use after free in WebRTC
  - * CVE-2025-10502: Heap buffer overflow in ANGLE
  - * Fix rendering issue on epel9


author: Than Ngo <than@redhat.com> - 140.1.15^chromium140.0.7339.207-1
changelog:
  - Update to 140.0.7339.207
  - * CVE-2025-10890: Side-channel information leakage in V8
  - * CVE-2025-10891: Integer overflow in V8
  - * CVE-2025-10892: Integer overflow in V8


author: Richard W.M. Jones <rjones@redhat.com> - 0.79.20-3
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Than Ngo <than@redhat.com> - 140.0.7339.80-1
changelog:
  - Update to 140.0.7339.80
    * CVE-2025-9864: Use after free in V8
    * CVE-2025-9865: Inappropriate implementation in Toolbar
    * CVE-2025-9866: Inappropriate implementation in Extensions
      CVE-2025-9867: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 140.0.7339.127-1
changelog:
  - Update to 140.0.7339.127
    * CVE-2025-10200: Use after free in Serviceworker
    * CVE-2025-10201: Inappropriate implementation in Mojo


author: Than Ngo <than@redhat.com> - 140.0.7339.185-1
changelog:
  - Update to 140.0.7339.185
    * CVE-2025-10585: Type Confusion in V8
    * CVE-2025-10500: Use after free in Dawn
    * CVE-2025-10501: Use after free in WebRTC
    * CVE-2025-10502: Heap buffer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 140.0.7339.207-1
changelog:
  - Update to 140.0.7339.207
    * CVE-2025-10890: Side-channel information leakage in V8
    * CVE-2025-10891: Integer overflow in V8
    * CVE-2025-10892: Integer overflow in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.54-1
changelog:
  - Update to 141.0.7390.54
    * High CVE-2025-11205: Heap buffer overflow in WebGPU
    * High CVE-2025-11206: Heap buffer overflow in Video
    * Medium CVE-2025-11207: Side-channel information leakage in Storage
    * Medium CVE-2025-11208: Inappropriate implementation in Media
    * Medium CVE-2025-11209: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11210: Side-channel information leakage in Tab
    * Medium CVE-2025-11211: Out of bounds read in Media
    * Medium CVE-2025-11212: Inappropriate implementation in Media
    * Medium CVE-2025-11213: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11215: Off by one error in V8
    * Low CVE-2025-11216: Inappropriate implementation in Storage
    * Low CVE-2025-11219: Use after free in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.65-1
changelog:
  - Update to 141.0.7390.65
    * High CVE-2025-11458: Heap buffer overflow in Sync
    * High CVE-2025-11460: Use after free in Storage
    * Medium CVE-2025-11211: Out of bounds read in WebCodecs


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.13-1
changelog:
  - Update to release v1.31.13
  - Resolves: rhbz#2333357, rhbz#2398406, rhbz#2398661, rhbz#2399063,
    rhbz#2399337
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-1
changelog:
  - Update to release 1.32.9
  - Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064,
    rhbz#2399338
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-1
changelog:
  - Update to release v1.33.5
  - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,
    rhbz#2399065, rhbz#2399339
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-1
changelog:
  - Update to release v1.34.1
  - Resolves: rhbz#2333357, rhbz#2398409, rhbz#2398664, rhbz#2399066,
    rhbz#2399340
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.1-1
changelog:
  - Update to release v0.26.1
  - Resolves: rhbz#2382656
  - Upstream fix
  - Includes temporary nodwarf5 flag for go


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.27.0-1
changelog:
  - Update to release v0.27.0
  - Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.29.0-1
changelog:
  - Update to release v0.29.0
  - Resolves: rhbz#2397747, rhbz#2398425, rhbz#2398679, rhbz#2399082,
    rhbz#2399355
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.3.3-1
changelog:
  - Update to release v28.3.3
  - Resolves: rhbz#2384219
  - Resolves: CVE-2025-54388 / GHSA-x4rx-4gw3-53p4
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.1-1
changelog:
  - Update to release v28.5.1
  - Resolves: rhbz#2401164, rhbz#2384164, rhbz#2384149
  - Upstream new features and fixes


author: Dogtag PKI Team <devel@lists.dogtagpki.org> - 11.6.0-0.1.alpha1
changelog:
  * Wed Jul 17 2024 Fedora Release Engineering <releng@fedoraproject.org> - 11.5.0-3.2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.12.2-9
changelog:
  - Do not pass OAuth2 client secret for public clients (freeipa#9734)
  - Fix upgrade for two-way trust to Active Directory (freeipa#9471 post-fix)
  - Allow extending certmonger request timeouts to accomodate for slow HSMs (freeipa#9725)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.12.2-14
changelog:
  - CVE-2025-4404
  - Include encrypted DNS support subpackages
  - various fixes from ipa-4-12 branch upstream


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.16.5-0]
changelog:
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after resume (Mario Limonciello (AMD))
  - net: ipv4: fix regression in local-broadcast routes (Oscar Maes)
  - Linux v6.16.5


author: Augusto Caringi <acaringi@redhat.com> [6.16.6-0]
changelog:
  - Add another bug fix staged for 6.16 (Justin M. Forbes)
  - Turn on PHY_ROCKCHIP_SAMSUNG_DCPHY for Fedora (Justin M. Forbes)
  - Linux v6.16.6


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.4.3-1
changelog:
  - Upstream version bump
  - Move kernel-headers dependency to a build requirement, not a runtime dependency


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Jerry James <loganjerry@gmail.com> - 0.9-37.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Remi Collet <remi@fedoraproject.org> - 8.0.6-1
changelog:
  - update to 8.0.6
    fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819
  - update documentation to 8.0.5


