# changelog

author: Than Ngo <than@redhat.com> - 141.0.7390.65-1
changelog:
  - Update to 141.0.7390.65
    * High CVE-2025-11458: Heap buffer overflow in Sync
    * High CVE-2025-11460: Use after free in Storage
    * Medium CVE-2025-11211: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 142.0.7444.59-1
changelog:
  - Update to 142.0.7444.59
    * High CVE-2025-12428: Type Confusion in V8
    * High CVE-2025-12429: Inappropriate implementation in V8
    * High CVE-2025-12430: Object lifecycle issue in Media
    * High CVE-2025-12431: Inappropriate implementation in Extensions
    * High CVE-2025-12432: Race in V8
    * High CVE-2025-12433: Inappropriate implementation in V8
    * High CVE-2025-12036: Inappropriate implementation in V8
    * Medium CVE-2025-12434: Race in Storage
    * Medium CVE-2025-12435: Incorrect security UI in Omnibox
    * Medium CVE-2025-12436: Policy bypass in Extensions
    * Medium CVE-2025-12437: Use after free in PageInfo
    * Medium CVE-2025-12438: Use after free in Ozone
    * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
    * Low CVE-2025-12440: Inappropriate implementation in Autofill
    * Medium CVE-2025-12441: Out of bounds read in V8
    * Medium CVE-2025-12443: Out of bounds read in WebXR
    * Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
    * Low CVE-2025-12445: Policy bypass in Extensions
    * Low CVE-2025-12446: Incorrect security UI in SplitView
    * Low CVE-2025-12447: Incorrect security UI in Omnibox
    * Refreshed ppc64le patches
    * Refreshed system-brotli patch
    * Refreshed clang++-unknown-argument patch
    * Refreshed split-threshold-for-reg-with-hint patch
    * Fixed some FTBFS caused by missing header files
    * Fixed FTBFS caused by old rust compiler
    * Fixed FTBFS caused by new glibc-2.42 in Rawhide
    * Fixed FTBFS caused by old python-3.9.x in EL8/9
    * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old ffmpeg on EL9


author: Than Ngo <than@redhat.com> - 142.0.7444.134-1
changelog:
  - Update to 142.0.7444.134
    * High CVE-2025-12725: Out of bounds write in WebGPU
    * High CVE-2025-12726: Inappropriate implementation in Views
    * High CVE-2025-12727: Inappropriate implementation in V8
    * Medium CVE-2025-12728: Inappropriate implementation in Omnibox
    * Medium CVE-2025-12729: Inappropriate implementation in Omnibox


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


