# changelog

author: Than Ngo <than@redhat.com> - 140.0.7339.80-1
changelog:
  - Update to 140.0.7339.80
    * CVE-2025-9864: Use after free in V8
    * CVE-2025-9865: Inappropriate implementation in Toolbar
    * CVE-2025-9866: Inappropriate implementation in Extensions
      CVE-2025-9867: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 140.0.7339.127-1
changelog:
  - Update to 140.0.7339.127
    * CVE-2025-10200: Use after free in Serviceworker
    * CVE-2025-10201: Inappropriate implementation in Mojo


author: Than Ngo <than@redhat.com> - 140.0.7339.185-1
changelog:
  - Update to 140.0.7339.185
    * CVE-2025-10585: Type Confusion in V8
    * CVE-2025-10500: Use after free in Dawn
    * CVE-2025-10501: Use after free in WebRTC
    * CVE-2025-10502: Heap buffer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 140.0.7339.207-1
changelog:
  - Update to 140.0.7339.207
    * CVE-2025-10890: Side-channel information leakage in V8
    * CVE-2025-10891: Integer overflow in V8
    * CVE-2025-10892: Integer overflow in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.54-1
changelog:
  - Update to 141.0.7390.54
    * High CVE-2025-11205: Heap buffer overflow in WebGPU
    * High CVE-2025-11206: Heap buffer overflow in Video
    * Medium CVE-2025-11207: Side-channel information leakage in Storage
    * Medium CVE-2025-11208: Inappropriate implementation in Media
    * Medium CVE-2025-11209: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11210: Side-channel information leakage in Tab
    * Medium CVE-2025-11211: Out of bounds read in Media
    * Medium CVE-2025-11212: Inappropriate implementation in Media
    * Medium CVE-2025-11213: Inappropriate implementation in Omnibox
    * Medium CVE-2025-11215: Off by one error in V8
    * Low CVE-2025-11216: Inappropriate implementation in Storage
    * Low CVE-2025-11219: Use after free in V8


author: Than Ngo <than@redhat.com> - 141.0.7390.65-1
changelog:
  - Update to 141.0.7390.65
    * High CVE-2025-11458: Heap buffer overflow in Sync
    * High CVE-2025-11460: Use after free in Storage
    * Medium CVE-2025-11211: Out of bounds read in WebCodecs


author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Miroslav Suchý <msuchy@redhat.com> 1.64-1
changelog:
  - add copyleft-next-0.3.1 license
  - Add public-domain text for llvm-test-suite
  - document usage exception for fedora-remix-logos
  - add MIPS and ThirdEye licenses
  - add libcsv UltraPermissive dedication
  - Add public-domain text for stb


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.14-1
changelog:
  - Update to 1.3.14
    - Restrict mysql_enable_utf8 to DBD::mysql
    - PgJSON: Fix GKFAS when called with a column list


author: Paul Howarth <paul@city-fan.org> - 1.3.15-1
changelog:
  - Update to 1.3.15
    - Improve Redis driver performance
    - Implement searchOn/deleteIfLowerThan into Redis
    - Prefer Redis::Fast


author: Paul Howarth <paul@city-fan.org> - 1.6200-1
changelog:
  - Update to 1.62
    - Fixed AEX.pm
    - Removed throttling from AlphaVantage.pm (GH#363)
    - Added CurrencyFreaks.pm - new currency module
    - YahooJSON.pm - added more error handling (GH#390)
    - Fixed MarketWatch.pm module (GH#389)
    - Rewrote Fool.pm and added back to F::Q (GH#379)
    - Added StockData.pm - methods stockdata, nyse, nasdaq
    - Modified YahooJSON.pm module in order handle EU consent redirects better
    - TwelveData.pm - Added "last" to data being returned
    - Added BorsaItaliana.pm - module for Borsa Italiana, Italian traded bonds
      using ISIN
    - YahooWeb.pm - modified YahooWeb to account for changes from Yahoo (GH#377)
  - Upstream dropped CONTRIBUTING.pod


author: Michal Josef Špaček <mspacek@redhat.com> - 1.6200-3
changelog:
  - Fix version handling for build with different locales set
    `printf "%.4f" 1.62` has different results e.g. for cs_CZ.UTF-8 vs C
  - Rename variable to cpan_version which is common in Fedora


author: Paul Howarth <paul@city-fan.org> - 1.6300-1
changelog:
  - Update to 1.63
    - Fixed TesouroDireto.pm - using different source URL (GH#424)
    - Added FinanceAPI.pm - requires API key from https://financeapi.net/
      - US and other exchange data available
    - Fixed BVB.pm (GH#409)
    - Fixed BSEIndia.pm (GH#410); removed Unzip as quotes file is now a CSV file
    - Fixed NSEIndia.pm (GH#410)
    - Fixed NZX.pm (GH#401)


author: Paul Howarth <paul@city-fan.org> - 1.6400-1
changelog:
  - Update to 1.64
    - Update AlphaVantage.pm (GH#447)
    - Fix to Stooq.pm (GH#445)
    - Updated ASX.pm (GH#404)
    - Added more fields to CSE.pm and exposed all labels
    - Changed parsing in Comdirect.pm (GH#413)
    - Complete rewrite of OnVista.pm (GH#414)
    - Minor fix to FinanceAPI decoding JSON (GH#434)
    - Modified YahooJSON to deal with "nan" as dividend yield in JSON
    - New CurrencyRates module, CurrencyRates/FinanceAPI (GH#427)
    - Fixed Bourso.pm (GH#417)
    - Allowed Currency Rates modules Fixer.pm and OpenExchange.pm to read their
      API keys from environment variables (GH#426)
    - Removed references to IEXCloud (IEX ended support for all products at the
      end of August 2024)
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Add build conditional for author tests, disabled by default


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Paul Howarth <paul@city-fan.org> - 1.6700-1
changelog:
  - Update to 1.67
    - Fixed ASEGR.pm; web site redesigned, URL used for data was no longer
      working (GH#509)
    - Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)
    - Added a new module to fetch data from SwissFundData (GH#515)
    - Handle no trade date in BorsaItaliana.pm (GH#528)
    - Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm
    - Fixed MorningstarCH.pm
    - Fixed MorningstarUK.pm
  - Package new CONTRIBUTING.md file


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Fix Source URL (frostyx@email.cz)
  - Unify descriptions and mention querying bodhi (frostyx@email.cz)
  - Link fedfind project (frostyx@email.cz)
  - make repository REUSE compliant (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Exclude archived releases (nforro@redhat.com)
  - Generate aliases for minor versions of EPEL (nforro@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.8-1
changelog:
  - Implement a filter_distro helper function (frostyx@email.cz)
  - Test EPEL minor version aliases after 10.1 branching (nforro@redhat.com)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.13.6-9
changelog:
  - Fix incorrect version in metadata (fix RHBZ#2405588)
  - We still have an unwanted ^post0, but it’s better than 0.0.1


