# changelog

author: Simone Caronni <negativo17@gmail.com> - 011.3-5
changelog:
  - Remove all EL7 / Python 2 conditionals.
  - Trim changelog.
  - Format SPEC file and sort all Requires/BuildRequires.


author: Than Ngo <than@redhat.com> - 136.0.7103.59-1
changelog:
  - Update to 136.0.7103.59
    * CVE-2025-4096: Heap buffer overflow in HTML
    * CVE-2025-4050: Out of bounds memory access in DevTools
    * CVE-2025-4051: Insufficient data validation in DevTools
    * CVE-2025-4052: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 136.0.7103.113-1
changelog:
  - Update to 136.0.7103.113
    * CVE-2025-4664: Insufficient policy enforcement in Loader
    * CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Kamil Dudka <kdudka@redhat.com> - 3.4.1-1
changelog:
  - introduce the csdiff-static subpackage with the csgrep-static executable
  - update to latest upstream release


author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 1.22.6-1
changelog:
  - Update dpkg to 1.22.6
  - Drop dpkg-fsys-usrunmess as it is not required on properly usr-merged systems
    and pulls in perl as a dependency.


author: Simone Caronni <negativo17@gmail.com> - 1.22.15-3
changelog:
  - Clean up SPEC file.
  - Adjust Requires and BuildRequires.
  - Update configure options.
  - Fix all tests except one.


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 25.01.1-2
changelog:
  - No longer relax url lower bound (url 2.5.4 is packaged)
  - Adjust License for url 2.5.4 with idna 1.x with ICU4X backend


author: Jens Petersen <petersen@redhat.com> - 0.6.0-0.1
changelog:
  - update to 0.6.0
    https://github.com/idris-lang/Idris2/blob/v0.6.0/CHANGELOG.md
  - revert to chez-scheme


author: Jens Petersen <petersen@redhat.com> - 0.7.0-3
changelog:
  - use github archive tarball (zbyszek, #2314358)
  - enable s390x
  - rename docs subpackage to noarch doc (#2314358)
  - move license file to lib (zbyszek, #2314358)


author: Simone Caronni <negativo17@gmail.com> - 1:31.0-14
changelog:
  - Remove obsolete EL7, Python 2 conditionals and Conflicts.
  - Switch to a valid Source URL.
  - Explicitly list man pages.
  - Format SPEC file.
  - Trim changelog.


author: Miro Hrončok <mhroncok@redhat.com> - 20.21.1-1
changelog:
  - Update to 20.21.1
  - Backport from 20.23.0: Don't install setuptools and wheel to Python 3.12+ environments
  - Add RPM Requires needed for Python 3.12


author: Miro Hrončok <miro@hroncok.cz> - 20.21.1-6
changelog:
  - When getting wheels for /usr/bin/python3 interpreter, look for them in
    proper directories
  - Fixes: rhbz#2272958


author: Lumir Balhar <lbalhar@redhat.com> - 20.21.1-12
changelog:
  - Prevent command injection by quoting template strings in activation
    scripts
  - Fixes: rhbz#2328747


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-4
changelog:
  - Allow procfs 0.17, which 7, and roxmltree 0.20
  - https://github.com/nushell/nushell/pull/14489
  - https://github.com/nushell/nushell/pull/14513


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.2-6
changelog:
  - Set permissions of cert, key and rsakeys.ini to 0640
  - Revert optional dependency on noopenh264, library dependency exists


