# changelog

author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Than Ngo <than@redhat.com> - 143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
    * High: Under coordination
    * Medium CVE-2025-14372: Use after free in Password Manager
    * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them unreadable


author: Than Ngo <than@redhat.com> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Than Ngo <than@redhat.com> - 143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192
    * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Luya Tshimbalanga <luya@fedoraproject.org> - 3.13.0-1
changelog:
  - Update to 3.13.0 Set Max ISA detection to SSE4.2 (AVX support is broken)
    Enable aarch64 architecture support without ISA Exclude ar Resolves:


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


