# changelog

author: Than Ngo <than@redhat.com> - 142.0.7444.175-4
changelog:
  - Enable system libcxx
  - Fix link error when building with system libcxx
  - Apply memory-allocator-dcheck-assert-fix for aarch64


author: Than Ngo <than@redhat.com> - 143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
    * High CVE-2025-13630: Type Confusion in V8
    * High CVE-2025-13631: Inappropriate implementation in Google Updater
    * High CVE-2025-13632: Inappropriate implementation in DevTools
    * High CVE-2025-13633: Use after free in Digital Credentials
    * Medium CVE-2025-13634: Inappropriate implementation in Downloads
    * Medium CVE-2025-13720: Bad cast in Loader
    * Medium CVE-2025-13721: Race in v8
    * Low CVE-2025-13635: Inappropriate implementation in Downloads
    * Low CVE-2025-13636: Inappropriate implementation in Split View
    * Low CVE-2025-13637: Inappropriate implementation in Downloads
    * Low CVE-2025-13638: Use after free in Media Stream
    * Low CVE-2025-13639: Inappropriate implementation in WebRTC
    * Low CVE-2025-13640: Inappropriate implementation in Passwords


author: Than Ngo <than@redhat.com> - 143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
    * High: Under coordination
    * Medium CVE-2025-14372: Use after free in Password Manager
    * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them unreadable


author: Than Ngo <than@redhat.com> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Than Ngo <than@redhat.com> - 143.0.7499.192-1
changelog:
  - Update tp 143.0.7499.192
    * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64
  - Enable build for epel10.1


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Kim B. Heino <b@bbbs.net> - 0.31-1
changelog:
  - Upgrade to 0.31
  - CVE-2025-67603: Add PolicyKit authorization to D-Bus methods
  - CVE-2025-67858: Verify interface input parameter on D-Bus methods


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64
  - Add missing SPDX identifiers to license field


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


