# changelog

author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Than Ngo <than@redhat.com> - 138.0.7204.157-1
changelog:
  - Update to 138.0.7204.157
    * CVE-2025-7656: Integer overflow in V8
    * CVE-2025-7657: Use after free in WebRTC
    * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU


author: Than Ngo <than@redhat.com> - 138.0.7204.168-1
changelog:
  - Update to 138.0.7204.168
    * CVE-2025-8010: Type Confusion in V8
    * CVE-2025-8011: Type Confusion in V8


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Packit <hello@packit.dev> - 14-1
changelog:
  Changes with 14
  ----------------
    * build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps group (#147)
      * Author: dependabot[bot], Reviewers: Simon de Vlieger
    * doc: fix typo (#152)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt
    * ibcli: add new --output-name flag and predictable default names (#158)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: fix creating output dir for `--with-buildlog` (#150)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show "success" message with output dir when build finishes (#154)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * packit: enable epel-9 and epel-10 (#149)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai

  — Somewhere on the Internet, 2025-03-14


author: Packit <hello@packit.dev> - 15-1
changelog:
  Changes with 15
  ----------------
    * README: document that cross building works (#168)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * Revert "blueprintload: enable strict checking for toml" (#174)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * blueprintload: enable strict checking for toml (#163)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    * go.mod: update to latest version of `github.com/osbuild/blueprint` (#172)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * import: `progress` from `bootc-image-builder` (#179)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * import: `setup`, `util`, `podmanutil` from `bootc-image-builder` (#178)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * main: Add a --version flag to show the build version (#175)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * main: allow seed setting (#176)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * main: automatically cross build when --arch <foreign> is passed (#164)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show output directory content after image build (#162)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * main: tweak handling of --output-name to avoid adding double extensions (#161)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: tweak how ibcli determines if bootstraping is needed (#167)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * many: move to use the new github.com/osbuild/blueprint module (HMS-5804) (#169)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * progress: set --cache-max-size in osbuild (#182)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 19-1
changelog:
  Changes with 19
  ----------------
    * refactor: use standard logger instead of logrus (#214)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 25-1
changelog:
  Changes with 25
  ----------------
    * deps: update images to 0.162.0 (#247)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai
    * main: `--version` includes git commit (#230)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * packit: enable RHEL 10 builds (HMS-8829) (#246)
      * Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-16


author: Packit <hello@packit.dev> - 26-1
changelog:
  Changes with 26
  ----------------
    * deps: bump images to 0.164 (#252)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
    * main: add `--ignore-warnings` cmdline option (#250)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Simon de Vlieger
    * testutil: trivial cleanup/rename (#249)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-21


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Packit <hello@packit.dev> - 4-1
changelog:
  Changes with 4
  ----------------
    * ci: pull osbuild from COPR (#3)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-09


author: Packit <hello@packit.dev> - 5-1
changelog:
  Changes with 5
  ----------------
    * Fixed cli pkg name in README.md (#8)
      * Author: Fabian Arrotin, Reviewers: Simon de Vlieger
    * ci: enable epel8 in packit (#6)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * many: replace `$arch` and `$buildarch` variable manually (COMPOSER-2507) (#10)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * readme updates (#7)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 6-1
changelog:
  Changes with 6
  ----------------
    * build: include `arch` in artifact names (#12)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-17


author: Packit <hello@packit.dev> - 8-1
changelog:
  Changes with 8
  ----------------
    * builder: return `release` in results (#14)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-07-24


author: Sérgio M. Basto <sergio@serjux.com> - 0.5.93-4
changelog:
  - Force replacement of packages of
    copr:copr.fedorainfracloud.org:sergiomb:libayatana-appindicator repo


author: Peter Oliver <git@mavit.org.uk> - 16p-4
changelog:
  - Update build options
  - Drop obsolete options.
  - Specify the correct build flags for ARM and zSeries.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.34.0-2
changelog:
  - Build for Python 3.14 (fix RHBZ#2372189)
  - Disable uvloop dep., and therefore the "standard" extra, for now
  - Do not error on warnings, as this is too strict and there are new
    DeprecationWarnings
  - Patch test_loop_auto for Python 3.14


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


