# changelog

author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Than Ngo <than@redhat.com> - 145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
    * CVE-2026-2648: Heap buffer overflow in PDFium
    * CVE-2026-2649: Integer overflow in V8
    * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
    * CVE-2026-3061: Out of bounds read in Media
    * CVE-2026-3062: Out of bounds read and write in Tint
    * CVE-2026-3063: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 145.0.7632.159-1
changelog:
  - Update to 145.0.7632.159
    * CVE-2026-3536: Integer overflow in ANGLE
    * CVE-2026-3537: Object lifecycle issue in PowerVR
    * CVE-2026-3538: Integer overflow in Skia
    * CVE-2026-3539: Object lifecycle issue in DevTools
    * CVE-2026-3540: Inappropriate implementation in WebAudio
    * CVE-2026-3541: Inappropriate implementation in CSS
    * CVE-2026-3542: Inappropriate implementation in WebAssembly
    * CVE-2026-3543: Inappropriate implementation in V8
    * CVE-2026-3544: Heap buffer overflow in WebCodecs
    * CVE-2026-3545: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
    * CVE-2026-3913: Heap buffer overflow in WebML
    * CVE-2026-3914: Integer overflow in WebML
    * CVE-2026-3915: Heap buffer overflow in WebML
    * CVE-2026-3916: Out of bounds read in Web Speech
    * CVE-2026-3917: Use after free in Agents
    * CVE-2026-3918: Use after free in WebMCP
    * CVE-2026-3919: Use after free in Extensions
    * CVE-2026-3920: Out of bounds memory access in WebML
    * CVE-2026-3921: Use after free in TextEncoding
    * CVE-2026-3922: Use after free in MediaStream
    * CVE-2026-3923: Use after free in WebMIDI
    * CVE-2026-3924: Use after free in WindowDialog
    * CVE-2026-3925: Incorrect security UI in LookalikeChecks
    * CVE-2026-3926: Out of bounds read in V8
    * CVE-2026-3927: Incorrect security UI in PictureInPicture
    * CVE-2026-3928: Insufficient policy enforcement in Extensions
    * CVE-2026-3929: Side-channel information leakage in ResourceTiming
    * CVE-2026-3930: Unsafe navigation in Navigation
    * CVE-2026-3931: Heap buffer overflow in Skia
    * CVE-2026-3932: Insufficient policy enforcement in PDF
    * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
    * CVE-2026-3935: Incorrect security UI in WebAppInstalls
    * CVE-2026-3936: Use after free in WebView
    * CVE-2026-3937: Incorrect security UI in Downloads
    * CVE-2026-3938: Insufficient policy enforcement in Clipboard
    * CVE-2026-3939: Insufficient policy enforcement in PDF
    * CVE-2026-3940: Insufficient policy enforcement in DevTools
    * CVE-2026-3941: Insufficient policy enforcement in DevTools
    * CVE-2026-3942: Incorrect security UI in PictureInPicture


author: Than Ngo <than@redhat.com> - 146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
    * CVE-2026-4439: Out of bounds memory access in WebGL
    * CVE-2026-4440: Out of bounds read and write in WebGL
    * CVE-2026-4441: Use after free in Base
    * CVE-2026-4442: Heap buffer overflow in CSS
    * CVE-2026-4443: Heap buffer overflow in WebAudio
    * CVE-2026-4444: Stack buffer overflow in WebRTC
    * CVE-2026-4445: Use after free in WebRTC
    * CVE-2026-4446: Use after free in WebRTC
    * CVE-2026-4447: Inappropriate implementation in V8
    * CVE-2026-4448: Heap buffer overflow in ANGLE
    * CVE-2026-4449: Use after free in Blink
    * CVE-2026-4450: Out of bounds write in V8
    * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    * CVE-2026-4452: Integer overflow in ANGLE
    * CVE-2026-4453: Integer overflow in Dawn
    * CVE-2026-4454: Use after free in Network
    * CVE-2026-4455: Heap buffer overflow in PDFium
    * CVE-2026-4456: Use after free in Digital Credentials API
    * CVE-2026-4457: Type Confusion in V8
    * CVE-2026-4458: Use after free in Extensions
    * CVE-2026-4459: Out of bounds read and write in WebAudio
    * CVE-2026-4460: Out of bounds read in Skia
    * CVE-2026-4461: Inappropriate implementation in V8
    * CVE-2026-4462: Out of bounds read in Blink
    * CVE-2026-4463: Heap buffer overflow in WebRTC
    * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
    * High CVE-2026-4673: Heap buffer overflow in WebAudio
    * High CVE-2026-4674: Out of bounds read in CSS
    * High CVE-2026-4675: Heap buffer overflow in WebGL
    * High CVE-2026-4676: Use after free in Dawn
    * High CVE-2026-4677: Out of bounds read in WebAudio
    * High CVE-2026-4678: Use after free in WebGPU
    * High CVE-2026-4679: Integer overflow in Fonts
    * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Ryan Curtin <ryan@ratml.org> - 4.7.0-1
changelog:
  - Update to latest stable version.
  - No longer exclude s390x
  - Rebuilt with latest patched stb_image: memory-safety fixes


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


