# changelog

author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Than Ngo <than@redhat.com> - 143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
    * High: Under coordination
    * Medium CVE-2025-14372: Use after free in Password Manager
    * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them unreadable


author: Than Ngo <than@redhat.com> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Than Ngo <than@redhat.com> - 143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192
    * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: josef radinger <cheese@nosuchhost.net> - 2.6.0-1
changelog:
  - bump version
  - add basic_passwords.txt and vulnerabilities.csv
  - cleanup spec-file
  - remove patch1


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Petr Pisar <ppisar@redhat.com> - 0.39-7
changelog:
  - Convert RHEL 10 perl-XS-Parse-Keyword package to perl-XS-Parse-Keyword-epel
    with just perl-XS-Parse-Keyword-Builder and perl-XS-Parse-Keyword-tests
    subpackages (bug #2373142)


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


