v2.12.3

Security fix: eMudhra CA compromise

Backport of the v3 fix for the eMudhra certificate authority compromise to the v2 line.

Changes

• Bump Node.js from 22.21.1 to 22.23.4. This removes the compromised eMudhra intermediates from Node.js's bundled CA store.
• Fail the build if ca-certificates is older than 20250419+deb13u1
  (DSA-6572-1). That version distrusts the affected emSign and Comodo AAA roots.

Upgrading

If you pin the block to a version, update the pin:

  image: bh.cr/balenalabs/browser-<arch>/2.12.3

where <arch> is one of aarch64, armv7hf or amd64.

v3.0.4

c28e400 (Update Node.js and require patched ca-certificates, 2026-10-21)

v3.0.3

052c5d7 (docs: Add version field to the migration compose example, 2026-10-12)

v3.0.2

a14b6ab (Fix the privileged comment in the compose examples, 2026-10-09)
ceef7ea (Remove unused udev entrypoint, 2026-10-09)
fd75fe6 (docs: Add TODO for running without privileged mode, 2026-10-09)

v3.0.1

a170c03 (docs: Document Pi 3/4 GPU and CMA config for hardware decode, 2026-10-09)

v3.0.0

87c823b (Run Chromium as a Wayland client instead of X11, 2026-06-12)
804aa7c (docs: Rework readme for v3 and add a v2 to v3 migration guide, 2026-06-15)
6f03818 (Update supported device types for v3, 2026-06-15)
aea78cb (Add opt-in remote debugging via a TCP relay, 2026-06-16)
464ae57 (Remove FORCE_VULKAN, 2026-06-16)
1552073 (Add a diagnostics report endpoint, 2026-06-17)
ef6c399 (Remove remaining X11 code, 2026-06-18)
39b5bd3 (Play audio directly via ALSA instead of the audio block, 2026-06-19)
de1e80b (Restart Chromium when the display socket is recreated, 2026-06-21)
bf745de (Enable Intel VA-API hardware video decode on generic-amd64, 2026-06-21)
f913d05 (docs: Add design note on forcing H.264 for YouTube, 2026-06-21)
036f235 (Point docs and block metadata at balenasolutions, 2026-10-01)
18e9544 (docs: Add architecture diagram and link the display block, 2026-10-01)
f8638c8 (Fix /version always returning 'Version not set', 2026-10-01)
c8ecbdc (docs: Restructure API reference and use GitHub alerts, 2026-10-01)
8140809 (docs: Use GitHub alerts in the migration guide, 2026-10-01)
b72be37 (docs: Restyle the architecture diagram, 2026-10-05)
abf26bc (Keep the Wayland platform flag when FLAGS is set, 2026-10-07)

v2.12.2

74be32c (Re-enable automatic publishing of browser block, 2026-09-21)

v2.12.1

c3c3e06 (Update GPG signature for the RPi repo, 2026-08-13)

v2.12.0

e1211b0 (Update base image to Debian 13, 2025-10-31)
303749d (Enable vulkan on the Raspberry Pi 5, 2025-10-31)

v2.11.0

d6da70d (Replace balenalib base image, 2025-06-18)
1e0d729 (Replace install_packages command, 2025-06-18)
01521a0 (patch: Stop flowzone publish step, 2025-07-22)