<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="118">
<package pkgid="d5d7db5edbcb9d8cfa6d53e710e9c83c7ce327a46ab78b1868c8f90da565731e" name="3proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.7" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-6" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-7" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
</package>
<package pkgid="90ee05372d3024317fc4d9edf16e7ebd05b650e54e7438d16c9af47f55ba60fe" name="3proxy-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.7" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-6" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-7" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
</package>
<package pkgid="28f8963975493b7249b2e2cd426c45b88b31e5802a4173e098faf92b6a240e7c" name="awf-gtk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="ef7b90c369a10eca09f33a9f24e307a09e535c3bc9f165958d2f5fb66885a6cb" name="awf-gtk2-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="5214cdc2daac1ab45ea1dffb7b330e5c595043a2d80afb38cf15b74089733c8d" name="awf-gtk3-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="5cdf3b863ec54b8b23f98677d00857613126e3b7a892ed46e87a452771f07673" name="awf-gtk3-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="54d6c8c039c9c2901ffc129700568a8f0fc7b7631a23014740c554574882e2a1" name="awf-gtk4-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="f27fff63da292fc90f706f2879a01e3f8b79d0e81e52804f4ad07764cc9acedb" name="awf-gtk4-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.0" rel="1.el10_3"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="4ce9a1777fddfd1bb1c41d22240a9ce8847d43c79175acd5caa00d4173c10739" name="chromium-common-debuginfo" arch="aarch64">
  <version epoch="0" ver="150.0.7871.114" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="1a8e85a3858402f36f4f6367f2e082e7bd083f96b838a6535034a45d8a4c7912" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="150.0.7871.114" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="769b1850a0bf2a9d46409685e762db8d058e2aa16fab12fc540f4856d2e72d2d" name="chromium-headless-debuginfo" arch="aarch64">
  <version epoch="0" ver="150.0.7871.114" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="2e663a17d534cf4849019f542c655fa1961d0b5b940ecfe89f8a376c096469a3" name="chromium-qt5-ui-debuginfo" arch="aarch64">
  <version epoch="0" ver="150.0.7871.114" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="395ab2353ff928b89a49b260bce91e082550968dc5047ea4c19e1439fc469840" name="chromium-qt6-ui-debuginfo" arch="aarch64">
  <version epoch="0" ver="150.0.7871.114" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="213c874244c2ab604b9210dcc573329e5b848670a6e5424400e8c4af4c4a5fd2" name="cjson-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.19" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.17-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fabian Affolter &lt;mail@fabian-affolter.ch&gt; - 1.7.18-1" date="1727352000">- Update to new upstream version (closes rhbz#2237124)
- Fix rhbz#2277268, closes rhbz#2277269</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 1.7.19-1" date="1782907200">- Update to version 1.7.19 rhbz#2394084</changelog>
</package>
<package pkgid="7e1c992f59c58c65d9e05dddc269062b488770780f881d39ffa324b4edab03a2" name="cjson-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.19" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.17-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fabian Affolter &lt;mail@fabian-affolter.ch&gt; - 1.7.18-1" date="1727352000">- Update to new upstream version (closes rhbz#2237124)
- Fix rhbz#2277268, closes rhbz#2277269</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.18-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 1.7.19-1" date="1782907200">- Update to version 1.7.19 rhbz#2394084</changelog>
</package>
<package pkgid="f3bae1260a3cde6d0a8d5ae35fceda8310f8fe2f825672e9cdd83d682a54d966" name="fastfetch-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.65.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.48.1-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.49.0-1" date="1768478400">- update to 2.49.0</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.50.2-1" date="1768478401">- update to 2.50.2</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.57.1-1" date="1768478402">- update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.59.0-1" date="1771416000">- update to 2.59.0 rhbz#2385354
- Fix issue with Plasma 6.6 rhbz#2440585 rhbz#2440584</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.60.0-1" date="1774353600">- update to 2.60.0 rhbz#2445445</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.61.0-1" date="1775217600">- update to 1.61.0 rhbz#2452665</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.63.1-1" date="1779969600">- update to 2.63.1 rhbz#2460499</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.65.2-1" date="1783339200">- update to 2.65.2 rhbz#2484357</changelog>
</package>
<package pkgid="60a60508f817cccc456ca75382f10e6cc9748a406fc0844dfbf55233eef33056" name="fastfetch-debugsource" arch="aarch64">
  <version epoch="0" ver="2.65.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.48.1-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.49.0-1" date="1768478400">- update to 2.49.0</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.50.2-1" date="1768478401">- update to 2.50.2</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.57.1-1" date="1768478402">- update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.59.0-1" date="1771416000">- update to 2.59.0 rhbz#2385354
- Fix issue with Plasma 6.6 rhbz#2440585 rhbz#2440584</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.60.0-1" date="1774353600">- update to 2.60.0 rhbz#2445445</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.61.0-1" date="1775217600">- update to 1.61.0 rhbz#2452665</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.63.1-1" date="1779969600">- update to 2.63.1 rhbz#2460499</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.65.2-1" date="1783339200">- update to 2.65.2 rhbz#2484357</changelog>
</package>
<package pkgid="8e0984b48d169b9670c87818f5ebc9be4abd64ba4640ac7cb7d2fde5348eeaf3" name="haveged-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="537f677fec72715f41ef28362aee23906629f9cc476a8380b7c02c8538003a5a" name="haveged-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="1cd1f58989ab9f0d5c3f27957b3c8f8d5d47cf15c04468808f103f26a8d28515" name="hddfancontrol-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.2" rel="2.el10_3"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.1.1-2" date="1780833600">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-1" date="1783598400">- update to 2.1.2 fixes rhbz#2498274</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-2" date="1783598401">- commit vendored sources</changelog>
</package>
<package pkgid="eaf2a102e0476de879f234f88613a62960b6a508c08121ae3a719ccf63d02ada" name="hddfancontrol-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.2" rel="2.el10_3"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.1.1-2" date="1780833600">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-1" date="1783598400">- update to 2.1.2 fixes rhbz#2498274</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-2" date="1783598401">- commit vendored sources</changelog>
</package>
<package pkgid="c603622c865ed93e7a7b68cf99f62af46f3f8b9a8f8e026d789b45621ae8f6c3" name="helix-debuginfo" arch="aarch64">
  <version epoch="0" ver="25.07.1" rel="11.el10_3"/>
  <changelog author="Arvin Verain &lt;arvinverain@proton.me&gt; - 25.07.1-2" date="1755432000">- Allow icon to be overriden by icon themes</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-3" date="1761825600">- Allow etcetera 0.11</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-4" date="1761998400">- Bump release number to rebuild again for F42</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-5" date="1766836800">- Update gix dependency to 0.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.07.1-6" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 25.07.1-7" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Michael Kuhn &lt;suraia@fedoraproject.org&gt; - 25.07.1-8" date="1771675200">- Change gcc and git to recommends</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-9" date="1773057600">- Split helix into three packages</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-10" date="1779019200">- Update gix dependency to 0.83</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-11" date="1783080000">- Update gix dependency to 0.85</changelog>
</package>
<package pkgid="51d6a9cc275ee68470486e6c43239b8880148bb31777cfc594425a63a9d8b906" name="helix-debugsource" arch="aarch64">
  <version epoch="0" ver="25.07.1" rel="11.el10_3"/>
  <changelog author="Arvin Verain &lt;arvinverain@proton.me&gt; - 25.07.1-2" date="1755432000">- Allow icon to be overriden by icon themes</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-3" date="1761825600">- Allow etcetera 0.11</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-4" date="1761998400">- Bump release number to rebuild again for F42</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-5" date="1766836800">- Update gix dependency to 0.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.07.1-6" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 25.07.1-7" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Michael Kuhn &lt;suraia@fedoraproject.org&gt; - 25.07.1-8" date="1771675200">- Change gcc and git to recommends</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-9" date="1773057600">- Split helix into three packages</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-10" date="1779019200">- Update gix dependency to 0.83</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-11" date="1783080000">- Update gix dependency to 0.85</changelog>
</package>
<package pkgid="e7b460296030cd7a08cb26dce27ed33cbdcec832cd59f87fe27c76a0e3f54589" name="helix-parsers-debuginfo" arch="aarch64">
  <version epoch="0" ver="25.07.1" rel="11.el10_3"/>
  <changelog author="Arvin Verain &lt;arvinverain@proton.me&gt; - 25.07.1-2" date="1755432000">- Allow icon to be overriden by icon themes</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-3" date="1761825600">- Allow etcetera 0.11</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 25.07.1-4" date="1761998400">- Bump release number to rebuild again for F42</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-5" date="1766836800">- Update gix dependency to 0.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.07.1-6" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 25.07.1-7" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Michael Kuhn &lt;suraia@fedoraproject.org&gt; - 25.07.1-8" date="1771675200">- Change gcc and git to recommends</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-9" date="1773057600">- Split helix into three packages</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-10" date="1779019200">- Update gix dependency to 0.83</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 25.07.1-11" date="1783080000">- Update gix dependency to 0.85</changelog>
</package>
<package pkgid="b0c30424c274911f9dffcbaae705deaab8010a27ad21ea372fa84137c4fa09f0" name="isa-l-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.32.1" rel="1.el10_3"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-1" date="1736251200">- Update to version 2.31.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-3" date="1737201600">- Address compiler warnings on ppc64le and s390x</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-4" date="1738670400">- Backport fix for big endian block header bug</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-5" date="1742212800">- Address compiler warnings on aarch64
- Workaround for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-7" date="1755950400">- Proper fix for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-8" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.0-1" date="1772884800">- Update to version 2.32.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.1-1" date="1783080000">- Update to version 2.32.1</changelog>
</package>
<package pkgid="38bc76f45370eb9f376c5e2cae24a8393ac223d1de347d27b512920b0822eb5f" name="isa-l-debugsource" arch="aarch64">
  <version epoch="0" ver="2.32.1" rel="1.el10_3"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-1" date="1736251200">- Update to version 2.31.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-3" date="1737201600">- Address compiler warnings on ppc64le and s390x</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-4" date="1738670400">- Backport fix for big endian block header bug</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-5" date="1742212800">- Address compiler warnings on aarch64
- Workaround for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-7" date="1755950400">- Proper fix for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-8" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.0-1" date="1772884800">- Update to version 2.32.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.1-1" date="1783080000">- Update to version 2.32.1</changelog>
</package>
<package pkgid="afb4a4cb70ff61c0741836f5c1ae4a0d0b798bd730a8ca46fc6e2f26b9f28071" name="isa-l-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.32.1" rel="1.el10_3"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-1" date="1736251200">- Update to version 2.31.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-3" date="1737201600">- Address compiler warnings on ppc64le and s390x</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-4" date="1738670400">- Backport fix for big endian block header bug</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-5" date="1742212800">- Address compiler warnings on aarch64
- Workaround for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.31.1-7" date="1755950400">- Proper fix for failing python-isal tests on aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.31.1-8" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.0-1" date="1772884800">- Update to version 2.32.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 2.32.1-1" date="1783080000">- Update to version 2.32.1</changelog>
</package>
<package pkgid="c1dc26121963c7edef3fac10dec3204be73260d4214b17497fd3ed3e0012d7e7" name="jfrog-cli-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.112.0" rel="1.el10_3"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.87.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.92.0-1" date="1771502400">- update to 2.92.0 (resolves rhbz#2427925)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.95.0-1" date="1772798400">- update to 2.95.0 (resolves rhbz#2442715)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.98.0-1" date="1775044800">- update to 2.98.0 (resolves rhbz#2446929)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.102.0-1" date="1776859200">- update to 2.102.0 (resolves rhbz#2456564)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.104.1-1" date="1779710400">- update to 2.104.1 (resolves rhbz#2463822)
- exclude uv_test.go, which requires an Artifactory instance</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.108.0-1" date="1781524800">- Update to 2.108.0, conflict with jfrog-cli-v2-jf</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.109.0-1" date="1781870400">- Update to 2.109.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.111.0-1" date="1782820800">- Update to 2.111.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.112.0-1" date="1782993600">- Update to 2.112.0</changelog>
</package>
<package pkgid="595ce382a16d34a3d041189545496dc02b74cc78f340e4b0f7b2fba268b4c508" name="jfrog-cli-debugsource" arch="aarch64">
  <version epoch="0" ver="2.112.0" rel="1.el10_3"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.87.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.92.0-1" date="1771502400">- update to 2.92.0 (resolves rhbz#2427925)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.95.0-1" date="1772798400">- update to 2.95.0 (resolves rhbz#2442715)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.98.0-1" date="1775044800">- update to 2.98.0 (resolves rhbz#2446929)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.102.0-1" date="1776859200">- update to 2.102.0 (resolves rhbz#2456564)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.104.1-1" date="1779710400">- update to 2.104.1 (resolves rhbz#2463822)
- exclude uv_test.go, which requires an Artifactory instance</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.108.0-1" date="1781524800">- Update to 2.108.0, conflict with jfrog-cli-v2-jf</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.109.0-1" date="1781870400">- Update to 2.109.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.111.0-1" date="1782820800">- Update to 2.111.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.112.0-1" date="1782993600">- Update to 2.112.0</changelog>
</package>
<package pkgid="9e2d8333ea40028915eec2c2cd5a0f0d441583749edfc7d557103835877b1abe" name="libb64-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2" rel="19.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-17" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-18" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-19" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="9da6b3f2f6110a90ea6e97600027115a2a1e0c97c3ef42044c66cd75d299c156" name="libb64-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2" rel="19.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-17" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-18" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-19" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="3404270f0abc33acc321bf31058844682f1c4f1fbe5a660bf5c2674bf41595e2" name="libbson-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.3-1" date="1744200000">- update to 1.30.3
- add configuration for mongoc and bson cmake targets</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
</package>
<package pkgid="c160f17ec72f4a054988b82e54f47b5e4d553c083c57bb1fdb6a458c0a3823a9" name="libdjbsort-debuginfo" arch="aarch64">
  <version epoch="0" ver="20260621" rel="1.el10_3"/>
  <changelog author="Georg Sauthoff &lt;mail@gms.tf&gt; - 20260210-1" date="1783252800">- import libdjbsort 20260210 (fixes fedora#2486105)</changelog>
  <changelog author="Georg Sauthoff &lt;mail@gms.tf&gt; - 20260621-1" date="1783252801">- import djbsort version 20260621</changelog>
</package>
<package pkgid="f09713a25fe00b838009c07ba728f3728e4a037fa521ccab614afe307817c205" name="libdjbsort-debugsource" arch="aarch64">
  <version epoch="0" ver="20260621" rel="1.el10_3"/>
  <changelog author="Georg Sauthoff &lt;mail@gms.tf&gt; - 20260210-1" date="1783252800">- import libdjbsort 20260210 (fixes fedora#2486105)</changelog>
  <changelog author="Georg Sauthoff &lt;mail@gms.tf&gt; - 20260621-1" date="1783252801">- import djbsort version 20260621</changelog>
</package>
<package pkgid="ee954f01a6e111dfa6e23b8e8d555fb094741d752d7a1a25591edb4136dbade5" name="libobjfw-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="8508ae0f188e476c66c1ba5beb336df70920d8d7438065482f0f1e44b57da889" name="libobjfw-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="63c77aa322ab1cb38107613043ba6f88d5093c65db807dcd6da2d531b3d2dfbf" name="libobjfwhid-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="0865276abc539ee9c7ee1e2f31a177290306fcc1084ac4910861a1dca9c8e30d" name="libobjfwrt-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="91189c8e30338d0996cf4db689f4d3740fa9dd9d35f29f3daf863556d6af7a22" name="libobjfwtls-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="804098e93439f9ca905356b1216265322c119f3a8368f0e3842614541414d660" name="log4cxx-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="3.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.2.0-1" date="1723377600">- Update to 1.2.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
</package>
<package pkgid="0b7d76b3ee43d2467c78ccc02d46e1a2d53b7ad61a07a8c47f079f4ba5c32c25" name="log4cxx-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="3.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.2.0-1" date="1723377600">- Update to 1.2.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
</package>
<package pkgid="8e0e366f418211a0ccd5bb608ca2bf75acadce39224fb6159c717eee668c086b" name="maturin-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="5.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.8.7-1" date="1755604800">- Update to version 1.8.7</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.8.7-2" date="1756814400">- Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.8.7-3" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1758628800">- Update to version 1.9.4; Fixes RHBZ#2371174</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-2" date="1759924800">- Avoid PEP 639 when building maturin itself</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-1" date="1760788800">- Update to version 1.9.6; Fixes RHBZ#2401408</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-2" date="1765800000">- Allow cargo_metadata 0.23</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-3" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-4" date="1774094400">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-5" date="1783684800">- Update dialoguer to 0.12</changelog>
</package>
<package pkgid="76acea7ebf19d2ecca5fdf9921838dcccc96893975a90e43ea749cbcaf38874b" name="maturin-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="5.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.8.7-1" date="1755604800">- Update to version 1.8.7</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.8.7-2" date="1756814400">- Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.8.7-3" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1758628800">- Update to version 1.9.4; Fixes RHBZ#2371174</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-2" date="1759924800">- Avoid PEP 639 when building maturin itself</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-1" date="1760788800">- Update to version 1.9.6; Fixes RHBZ#2401408</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-2" date="1765800000">- Allow cargo_metadata 0.23</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-3" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-4" date="1774094400">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.9.6-5" date="1783684800">- Update dialoguer to 0.12</changelog>
</package>
<package pkgid="90b62a800de7d19e7128d54fe3b7182c85178b5d43126c9f4750cad786456368" name="mongo-c-driver-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.3-1" date="1744200000">- update to 1.30.3
- add configuration for mongoc and bson cmake targets</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
</package>
<package pkgid="c32aa2c3cda084d6e4af0520f954a08e782c394185e492c92980f8e020749c32" name="mongo-c-driver-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.3-1" date="1744200000">- update to 1.30.3
- add configuration for mongoc and bson cmake targets</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
</package>
<package pkgid="30838f4f165f9def3856b138e92d20fc9c33ea3b479c9c853b200a26cd1945eb" name="mongo-c-driver-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.3-1" date="1744200000">- update to 1.30.3
- add configuration for mongoc and bson cmake targets</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
</package>
<package pkgid="76cce472d40419883ddafba4af10de9731626ba5c7fbb472aaaff42798a98b6a" name="monit-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="1.el10_3"/>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 5.34.4-1" date="1736683200">- Update to 5.34.4</changelog>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 5.35.2-1" date="1753876800">- Update to 5.35.2</changelog>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 6.0.0-1" date="1783339200">- Update to v6.0.0 (#2489024)</changelog>
</package>
<package pkgid="d9e48a24db30188028d59cc578c6e9c5370661c6030061c77ab6abb5567e1487" name="monit-debugsource" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="1.el10_3"/>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 5.34.4-1" date="1736683200">- Update to 5.34.4</changelog>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 5.35.2-1" date="1753876800">- Update to 5.35.2</changelog>
  <changelog author="Stewart Adam &lt;s.adam@diffingo.com&gt; - 6.0.0-1" date="1783339200">- Update to v6.0.0 (#2489024)</changelog>
</package>
<package pkgid="883e20b35f66f5c18d42910abd370050e9bc51dcbf528f9e420630a0aeba96d5" name="nginx-mod-headers-more-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.40" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-4" date="1766750400">- Rebuild for 1.28.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-5" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-6" date="1770206400">- Rebuild for 1.28.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-7" date="1774440000">- Rebuild for 1.28.3</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-8" date="1776254400">- Rebuild for 1.30.0</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-9" date="1778673600">- Rebuild for 1.30.1</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-10" date="1779537600">- Rebuild for 1.30.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-11" date="1781697600">- Rebuild for 1.30.3</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.40-1" date="1783512000">- Update to 0.40 rhbz#2491062</changelog>
</package>
<package pkgid="cbd597b7cce20779952e07d62e8f8f7292c9e052e82eac82552436ed81760859" name="nginx-mod-headers-more-debugsource" arch="aarch64">
  <version epoch="0" ver="0.40" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-4" date="1766750400">- Rebuild for 1.28.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-5" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-6" date="1770206400">- Rebuild for 1.28.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-7" date="1774440000">- Rebuild for 1.28.3</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-8" date="1776254400">- Rebuild for 1.30.0</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-9" date="1778673600">- Rebuild for 1.30.1</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-10" date="1779537600">- Rebuild for 1.30.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-11" date="1781697600">- Rebuild for 1.30.3</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.40-1" date="1783512000">- Update to 0.40 rhbz#2491062</changelog>
</package>
<package pkgid="4f3892c74b7ebd45d8e580385103581b954a53060edb27d54e027f5aa03ad166" name="nuclei-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.8.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-5" date="1775131200">- Unretirement request:
  https://forge.fedoraproject.org/releng/tickets/issues/13296</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.7.1-1" date="1775131201">- Unretire and update to 3.7.1 (Resolves: rhbz#2445513)</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.8.0-1" date="1776686400">- Update to 3.8.0</changelog>
</package>
<package pkgid="df1932ae15925932331561f3f363caa0a94018b6e0d34fe0e2b141534137b63e" name="nuclei-debugsource" arch="aarch64">
  <version epoch="0" ver="3.8.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-5" date="1775131200">- Unretirement request:
  https://forge.fedoraproject.org/releng/tickets/issues/13296</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.7.1-1" date="1775131201">- Unretire and update to 3.7.1 (Resolves: rhbz#2445513)</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.8.0-1" date="1776686400">- Update to 3.8.0</changelog>
</package>
<package pkgid="cb44c96b7923aead053c89f5e5392d266bb5a22f4f8baf1539905e41bb5e6980" name="objfw-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="424545a03ed42afd7539b2697bc51683b41d8d9bc1f099f38ec509476acf7729" name="ofarc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="8a2a05aefe520eae8fb56e82582cc6b8f18e7f793d173cb7649724b33989389a" name="ofdns-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="07057026a8ef3eca36d96e05551c88a9a92de3236f20cf25cce6e84bfad1788c" name="ofgctester-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="53240e42a861279780bc26d35d0fe2ff716226adb41debd1de02ac16f169ef56" name="ofhash-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="308ab75b5c268b62ed0b6a1b9197c543385972c7cb2b1240424d67d7d11cec5a" name="ofhttp-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.7" rel="1.el10_3"/>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.4.4-1" date="1769947200">- Update to 1.4.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-1" date="1771761600">- Update to 1.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5-2" date="1771761601">- Add CMake files to %files</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.1-1" date="1771934400">- Update to 1.5.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.2-1" date="1778241600">- Update to 1.5.2</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.3-1" date="1779278400">- Update to 1.5.3</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.4-1" date="1779537600">- Update to 1.5.4</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.5-1" date="1780228800">- Update to 1.5.5</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.6-1" date="1782302400">- Update to 1.5.6</changelog>
  <changelog author="Jonathan Schleifer &lt;js@fedoraproject.org&gt; - 1.5.7-1" date="1783080000">- Update to 1.5.7</changelog>
</package>
<package pkgid="344f77a384c7dbb96afde43fc3cbc1a17c7caee2e568f95fad12f461de7083aa" name="onefetch-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.27.1" rel="8.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.26.1-7" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.26.1-8" date="1773144000">- Allow strum 0.28</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-1" date="1773921600">- Update to version 2.27.1; Fixes RHBZ#2449003</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-2" date="1773921601">- Update to version 2.27.1; Fixes RHBZ#2449003</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-3" date="1774008000">- Allow older strum 0.27 for EPEL10.2 and older</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-4" date="1776945600">- No longer allow image 0.25.9</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 2.27.1-5" date="1777723200">- Update gix dependency to 0.83</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 2.27.1-6" date="1783080000">- Update gix dependency to 0.85</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-7" date="1783166400">- Add upstream status for gix version bumps</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-8" date="1783166401">- Remove direct dependency on gix-features</changelog>
</package>
<package pkgid="c047c974e128825a06d21b0781abf891865568469d87e7dd12e65cd6a0362977" name="php-zstd-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1780660800">- update to 0.16.0
- drop pear/pecl dependency
- sources from github</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-2" date="1782820800">- rebuild with default php 8.3 #2488949</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.17.0-1" date="1783080000">- update to 0.17.0</changelog>
</package>
<package pkgid="e6ec2f6ba83a5e73069f9f12c75c7b758d4cd452a2cf175bc18dd5d2f423bd1e" name="php-zstd-debugsource" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1780660800">- update to 0.16.0
- drop pear/pecl dependency
- sources from github</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-2" date="1782820800">- rebuild with default php 8.3 #2488949</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.17.0-1" date="1783080000">- update to 0.17.0</changelog>
</package>
<package pkgid="41c83639b1487eedb20847aa64aaedd916c81791a7f29ac5a1703afdab375039" name="proftpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="c8795e93a166b330561f20c7c13da85bf26bffce445c33615fe9a97011aacbea" name="proftpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="63b32462c49c22e53a59b1425947c33e46035bd8cdd0470da1e5d154827e1a93" name="proftpd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="d881e18e8e718420a49de43b0f1c35138d291927bb1678451d982282674272ca" name="proftpd-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="3c64d75bd7aa5f16ed74cedbba39e1f0e832c3be11bc0af5791dd4ef29cb54fc" name="proftpd-postgresql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="49870945a55d16f0dfe6bd2934e836c601a5df8a21599fb077c2dd2c7376bc38" name="proftpd-proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="5fd5987c7bf43589907d4e01aa64154a373a8fb4c6bdd963743cabb1ee6885b4" name="proftpd-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="c65710aa027c510268f025b10d50f78114227de8ffa6925ed95ce030338cf228" name="proftpd-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="765ad91970795bb6a5790fcc9c28e0d44341b43ad5f89b00694a9de58ab49cec" name="pyo3-introspection-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.29.0" rel="2.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.29.0-1" date="1783512000">- Initial package (close RHBZ#2498040)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.29.0-2" date="1783512001">- Add a very simple man page</changelog>
</package>
<package pkgid="5cf0631f5c234c2b99deb939875675acafa7d14f3207998ee68680abb5dfc2e6" name="python-bcrypt-debugsource" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="14.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-3" date="1750507200">- Rely on automatic license-file handling</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.0-4" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-5" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-6" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.0-7" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-8" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-10" date="1783425600">- Switch URL from HTTP to HTTPS</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-12" date="1783425601">- Drop manual BuildRequires on python3-devel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-13" date="1783425602">- Replace BuildRequires: rust-packaging with cargo-rpm-macros</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-14" date="1783425603">- Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177</changelog>
</package>
<package pkgid="fefd0b7ee1b7c4cc06da2753f38b5d4ff82341d385ae00cd2dcd2efa58748db4" name="python-libcst-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.6" rel="4.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.8.0-8" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-9" date="1783425600">- Simplify and update build conditionals</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-10" date="1783425601">- Drop the hypothesmith test dependency (omit fuzz tests)
- Also drop hypothesis since it is also only used for fuzz tests</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-11" date="1783425602">- Test both the pure-Python parser and the Rust parser</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-12" date="1783425603">- Let LICENSE.dependencies be included in the .dist-info</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1783425604">- Update to 1.8.6 (close RHBZ#2368777)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-2" date="1783425605">- Also run cargo tests for native (Rust) parser</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-3" date="1783425606">- Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-4" date="1783512000">- Don’t attempt cargo tests on ppc64le due to a linker error</changelog>
</package>
<package pkgid="54750c28763703c88b9aedced88988f9023a0fc753455a5c42483fee395faa65" name="python-xxhash-debugsource" arch="aarch64">
  <version epoch="0" ver="3.8.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.5.0-1" date="1759924800">- Update to 3.5.0 (close RHBZ#2307449)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.6.0-1" date="1759924801">- Update to 3.6.0 (close RHBZ#2402506)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-1" date="1777204800">- Update to version 3.7.0; Fixes RHBZ#2461823</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-2" date="1782648000">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.0-1" date="1782648001">- Update to 3.8.0 (close RHBZ#2492139)
- Run tests with pytest, as upstream is gradually adopting it</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.1-1" date="1783425600">- Update to 3.8.1 upstream release
- Resolves: rhbz#2497360</changelog>
</package>
<package pkgid="2328d7c107f53e3093e09516967546a50f6ef65c6a02599706f32c5708719b24" name="python3-bcrypt-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="14.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-3" date="1750507200">- Rely on automatic license-file handling</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.0-4" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-5" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-6" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.0-7" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.0-8" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-10" date="1783425600">- Switch URL from HTTP to HTTPS</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-12" date="1783425601">- Drop manual BuildRequires on python3-devel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-13" date="1783425602">- Replace BuildRequires: rust-packaging with cargo-rpm-macros</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.3.0-14" date="1783425603">- Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177</changelog>
</package>
<package pkgid="d8f0714ff06f35ec285bb670bcfc50461674aebca4198c923896baaea07346a8" name="python3-libcst-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.6" rel="4.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.8.0-8" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-9" date="1783425600">- Simplify and update build conditionals</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-10" date="1783425601">- Drop the hypothesmith test dependency (omit fuzz tests)
- Also drop hypothesis since it is also only used for fuzz tests</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-11" date="1783425602">- Test both the pure-Python parser and the Rust parser</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.0-12" date="1783425603">- Let LICENSE.dependencies be included in the .dist-info</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1783425604">- Update to 1.8.6 (close RHBZ#2368777)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-2" date="1783425605">- Also run cargo tests for native (Rust) parser</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-3" date="1783425606">- Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-4" date="1783512000">- Don’t attempt cargo tests on ppc64le due to a linker error</changelog>
</package>
<package pkgid="0aced9f3806fb471187a2a3334d4b167f5eb1e2e6335274ee98a770a08cd2c19" name="python3-xxhash-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.8.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.5.0-1" date="1759924800">- Update to 3.5.0 (close RHBZ#2307449)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.6.0-1" date="1759924801">- Update to 3.6.0 (close RHBZ#2402506)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-1" date="1777204800">- Update to version 3.7.0; Fixes RHBZ#2461823</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-2" date="1782648000">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.0-1" date="1782648001">- Update to 3.8.0 (close RHBZ#2492139)
- Run tests with pytest, as upstream is gradually adopting it</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.1-1" date="1783425600">- Update to 3.8.1 upstream release
- Resolves: rhbz#2497360</changelog>
</package>
<package pkgid="fd4d9aa8c3e38aa350760fa5f0adb92439b58732ddf3ad0b1c995f7914b24bd7" name="reposurgeon-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.9" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.3-1" date="1753444801">- Disable go vet in tests
- Update to 5.3</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-2" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-3" date="1760097600">- Rebuild for golang 1.25.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-5" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 5.6-1" date="1776772800">- Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
  rhbz#2435061
- Use new go2rpm template
- Change URL to GitLab repo
- Remove ShellCheck and golint requirements
- Other misc changes</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.9-1" date="1783339200">- reposurgeon: 5.9 release</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.9-2" date="1783339201">- reposurgeon: 5.9 release</changelog>
</package>
<package pkgid="5938342c77e93ed3eaf342f0881974c778109af90cd2b131e640dbe407e68e9e" name="reposurgeon-debugsource" arch="aarch64">
  <version epoch="0" ver="5.9" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.3-1" date="1753444801">- Disable go vet in tests
- Update to 5.3</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-2" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-3" date="1760097600">- Rebuild for golang 1.25.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 5.3-5" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 5.6-1" date="1776772800">- Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
  rhbz#2435061
- Use new go2rpm template
- Change URL to GitLab repo
- Remove ShellCheck and golint requirements
- Other misc changes</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.9-1" date="1783339200">- reposurgeon: 5.9 release</changelog>
  <changelog author="Denis Fateyev &lt;denis@fateyev.com&gt; - 5.9-2" date="1783339201">- reposurgeon: 5.9 release</changelog>
</package>
<package pkgid="68d45275fac391ee9a14f33e836fc1dddc465114a5fa178aabe3849c5ed9c1de" name="routinator-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.15.2" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.14.0-3" date="1720008000">- Bump tokio-rustls dependency from 0.25 to 0.26 to match reqwest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.0-4" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.0-5" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.1-1" date="1737633600">- Update to version 0.14.1; Fixes: RHBZ#2339650</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.1-2" date="1737633601">- Restore license list; use shrink for easier future diffing</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.2-1" date="1743940800">- Update to 0.14.2; Fixes: RHBZ#2349822</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.14.2-4" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.15.2-1" date="1782993600">- Update to version 0.15.2; Resolves RHBZ#2400457</changelog>
</package>
<package pkgid="4ee66bf8de867863f0e8ef68ead4d061aa7c87d6f0f52fd1c8095c48c09ca222" name="rpki-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19.3" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.4-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.4-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.18.5-1" date="1737633600">- Update to version 0.18.5; Fixes: RHBZ#2339652</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.18.5-2" date="1737633601">- Restore license list; use shrink for easier future diffing</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.18.6-1" date="1752926400">- Update to version 0.18.6; Fixes RHBZ#2361845</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.6-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.18.6-4" date="1778500800">- Rebuild for rust-openssl
  CVE-2026-{41676,41677,41678,41681,41898,42327,44662}</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.19.3-1" date="1782993600">- Update to version 0.19.3; Resolves RHBZ#2396345</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.19.3-2" date="1783339200">- Allow building against quick-xml 0.41</changelog>
</package>
<package pkgid="1a0d0951ccd230f70f3dfcb8c2abd7ac32291c85949c496c5311110510fa5b50" name="ruff-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.15.21" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.14-2" date="1780660800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-1" date="1780660801">- Update to 0.15.15 (close RHBZ#2482696)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
</package>
<package pkgid="38716c8051d5f281caedddeea39aa8ecdbd7a8e29a3513ca789e5b247d97a1b5" name="ruff-debugsource" arch="aarch64">
  <version epoch="0" ver="0.15.21" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.14-2" date="1780660800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-1" date="1780660801">- Update to 0.15.15 (close RHBZ#2482696)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
</package>
<package pkgid="42da722e45ffe4cd0a5c65c18743ebb584ef8f9f8a29662edc454c6a7278660e" name="rust-onefetch-debugsource" arch="aarch64">
  <version epoch="0" ver="2.27.1" rel="8.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.26.1-7" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.26.1-8" date="1773144000">- Allow strum 0.28</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-1" date="1773921600">- Update to version 2.27.1; Fixes RHBZ#2449003</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-2" date="1773921601">- Update to version 2.27.1; Fixes RHBZ#2449003</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-3" date="1774008000">- Allow older strum 0.27 for EPEL10.2 and older</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-4" date="1776945600">- No longer allow image 0.25.9</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 2.27.1-5" date="1777723200">- Update gix dependency to 0.83</changelog>
  <changelog author="blinxen &lt;h-k-81@hotmail.com&gt; - 2.27.1-6" date="1783080000">- Update gix dependency to 0.85</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-7" date="1783166400">- Add upstream status for gix version bumps</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.27.1-8" date="1783166401">- Remove direct dependency on gix-features</changelog>
</package>
<package pkgid="93c2975b9d98ca48102cd591e7e31f055c3ee90582f3eb9a1a52ce462e6a74fd" name="rust-pyo3-introspection-debugsource" arch="aarch64">
  <version epoch="0" ver="0.29.0" rel="2.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.29.0-1" date="1783512000">- Initial package (close RHBZ#2498040)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.29.0-2" date="1783512001">- Add a very simple man page</changelog>
</package>
<package pkgid="bdce2e668a40a3b6239cb8b0766894f086527c74dc56488f983b475f6a842dcc" name="rust-routinator-debugsource" arch="aarch64">
  <version epoch="0" ver="0.15.2" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.14.0-3" date="1720008000">- Bump tokio-rustls dependency from 0.25 to 0.26 to match reqwest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.0-4" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.0-5" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.1-1" date="1737633600">- Update to version 0.14.1; Fixes: RHBZ#2339650</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.1-2" date="1737633601">- Restore license list; use shrink for easier future diffing</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.14.2-1" date="1743940800">- Update to 0.14.2; Fixes: RHBZ#2349822</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.14.2-4" date="1770465600">- Rebuild for RUSTSEC-2026-{0007,0008,0009} and CVE-2026-25537</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.15.2-1" date="1782993600">- Update to version 0.15.2; Resolves RHBZ#2400457</changelog>
</package>
<package pkgid="25684520d782e9234fe8a47b78d48af4d9ff829e9d0f9bfbcc7356fbc4cade09" name="rust-rpki-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19.3" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.4-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.4-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.18.5-1" date="1737633600">- Update to version 0.18.5; Fixes: RHBZ#2339652</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.18.5-2" date="1737633601">- Restore license list; use shrink for easier future diffing</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.18.6-1" date="1752926400">- Update to version 0.18.6; Fixes RHBZ#2361845</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.6-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.18.6-4" date="1778500800">- Rebuild for rust-openssl
  CVE-2026-{41676,41677,41678,41681,41898,42327,44662}</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.19.3-1" date="1782993600">- Update to version 0.19.3; Resolves RHBZ#2396345</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.19.3-2" date="1783339200">- Allow building against quick-xml 0.41</changelog>
</package>
<package pkgid="c336d31a1009a4da561bcc02bb047ac2397fd082f9e718e1f2c1fb8cad0d34b7" name="rust-sequoia-policy-config-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.7.0-1" date="1733486400">- Update to version 0.7.0; Fixes RHBZ#2311950</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.7.0-3" date="1738843200">- Rebuild for openssl crate &gt;= v0.10.70 (RUSTSEC-2025-0004)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.0-1" date="1741435200">- Update to version 0.8.0; Fixes RHBZ#2349876</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.1-1" date="1763467200">- Update to version 0.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.8.1-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.2-1" date="1783080000">- Update to version 0.8.2</changelog>
</package>
<package pkgid="a28faa918d15f4149b241160da8a4769baa160da3d751f21ad900c9e54834c16" name="rust-sequoia-sop-debugsource" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.0-1" date="1741435200">- Update to version 0.37.0; Fixes RHBZ#2350081</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.1-1" date="1744113600">- Update to version 0.37.1; Fixes RHBZ#2357700</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.2-1" date="1749729600">- Update to version 0.37.2; Fixes RHBZ#2372456</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-1" date="1765454400">- Update to version 0.37.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-3" date="1778500800">- Rebuild for sequoia-openpgp v2.3.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-4" date="1779883200">- Bump sequoia-wot dependency from 0.14 to 0.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.37.3-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.38.0-1" date="1783080000">- Update to version 0.38.0; Fixes RHBZ#2496877</changelog>
</package>
<package pkgid="256920042484746441e2851a1bcb5431346ba095f180028047505074f33bdb7d" name="rust-tree-sitter-cli-debugsource" arch="aarch64">
  <version epoch="0" ver="0.25.10" rel="3.el10_3"/>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.23.2-1" date="1729944000">- Update to 0.23.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.23.2-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.24.7-1" date="1738411200">- Update to 0.24.7</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.3-1" date="1745409600">- Update to 0.25.3 (rhbz#2279201)</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.5-1" date="1748779200">- Update to 0.25.5 (#2365532)</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.8-1" date="1752926400">- Update to 0.25.8 (#2370286)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25.8-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.10-1" date="1759060800">- Update to 0.25.10 (#2393687)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.25.10-3" date="1783684800">- Update dialoguer to 0.12
- No longer allow similar 2.6.0, since we have 2.7.0
- Update `License` expression</changelog>
</package>
<package pkgid="f1767b739c408d83169568092d9dc61766bfe537f758cc3e79db46e64ec85f45" name="sequoia-policy-config-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.7.0-1" date="1733486400">- Update to version 0.7.0; Fixes RHBZ#2311950</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.7.0-3" date="1738843200">- Rebuild for openssl crate &gt;= v0.10.70 (RUSTSEC-2025-0004)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.0-1" date="1741435200">- Update to version 0.8.0; Fixes RHBZ#2349876</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.1-1" date="1763467200">- Update to version 0.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.8.1-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.8.2-1" date="1783080000">- Update to version 0.8.2</changelog>
</package>
<package pkgid="9acf3f9d22ebf995a79977050b20d4e1e6ae88e0531c14cdab963867944c8a8e" name="sequoia-sop-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.0-1" date="1741435200">- Update to version 0.37.0; Fixes RHBZ#2350081</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.1-1" date="1744113600">- Update to version 0.37.1; Fixes RHBZ#2357700</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.2-1" date="1749729600">- Update to version 0.37.2; Fixes RHBZ#2372456</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-1" date="1765454400">- Update to version 0.37.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-3" date="1778500800">- Rebuild for sequoia-openpgp v2.3.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.37.3-4" date="1779883200">- Bump sequoia-wot dependency from 0.14 to 0.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.37.3-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.38.0-1" date="1783080000">- Update to version 0.38.0; Fixes RHBZ#2496877</changelog>
</package>
<package pkgid="2af051650a8f2727165becb48c6975dce51859f4c015517f5c5c5aba9c4ac55d" name="snapd-glib-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="04d11211544cfcc2c688eb25fb1918b13d55e1b563c9bf691530da8cd4b83237" name="snapd-glib-debugsource" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="3c62eff36f4c19f62140949c1f4e0eb71e7c44604162494d772ddbda3ecfd335" name="snapd-glib-tests-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="5cb5f7e042464b951984aa42e7a352c233b99e04ab6fcf22bfe3b3246f5912b9" name="snapd-qt-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="347026867a1bdf03106705ba90a427ef741c1beb845f948d7174a8accd0a1295" name="snapd-qt-qml-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="8f482f41eb1ca92c41cfdfda24b7aed179f35e28428909fc7cff8bb99a97e0dd" name="snapd-qt-tests-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.72" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.64-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc Deop i Argem&#xED; &lt;marcdeop@fedoraproject.org&gt; - 1.66-1" date="1726142400">- 1.66</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.66-4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.72-1" date="1783684800">- Rebase to 1.72</changelog>
</package>
<package pkgid="f1370005b827b703cda45ea59ccf38724479dbf96444678865bbd4da5c420993" name="strawberry-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.23" rel="1.el10_3"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.18-2" date="1776340800">- Rebuild (qt6)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-1" date="1776427200">- Update to version 1.2.19 (fedora#2459240)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-2" date="1776513600">- Make appstream metadata valid on EPEL9</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.19-3" date="1778760000">- Rebuild (qt6)</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.2.19-4" date="1780401600">- Rebuild for kdesingleapplication 1.2</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 1.2.19-5" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.20-1" date="1782475200">- Update to version 1.2.20 (fedora#2491095)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.21-1" date="1782648000">- Update to version 1.2.21 (feedora#2493909)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.22-1" date="1783339200">- Update to version 1.2.22 (fedora#2497217)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.23-1" date="1783598400">- Update to version 1.2.23 (fedora#2498524)</changelog>
</package>
<package pkgid="1a00246512b9b2158bd30e8a6c7a2e99758d9ece8793d8a363c3f50deccbf79b" name="strawberry-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.23" rel="1.el10_3"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.18-2" date="1776340800">- Rebuild (qt6)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-1" date="1776427200">- Update to version 1.2.19 (fedora#2459240)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-2" date="1776513600">- Make appstream metadata valid on EPEL9</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.19-3" date="1778760000">- Rebuild (qt6)</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.2.19-4" date="1780401600">- Rebuild for kdesingleapplication 1.2</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 1.2.19-5" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.20-1" date="1782475200">- Update to version 1.2.20 (fedora#2491095)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.21-1" date="1782648000">- Update to version 1.2.21 (feedora#2493909)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.22-1" date="1783339200">- Update to version 1.2.22 (fedora#2497217)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.23-1" date="1783598400">- Update to version 1.2.23 (fedora#2498524)</changelog>
</package>
<package pkgid="8e0db125eb380f90b93b5d27c9d1d00263ba2e28b00def06d87a7679f092f1e2" name="syncthing-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="75293681435a203f14d4942f043c4ff6ba308af94a5c2d4f3adce54f71eeca99" name="syncthing-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="d5a079766b644530d86e0d8464478ce62e8bad433d7dddaa6f16f3f826277c94" name="syncthing-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="4743d6bff9adb628f7ea81179bb03985aa181f1e1e9a386dc2840274eae84ba1" name="tree-sitter-cli-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.25.10" rel="3.el10_3"/>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.23.2-1" date="1729944000">- Update to 0.23.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.23.2-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.24.7-1" date="1738411200">- Update to 0.24.7</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.3-1" date="1745409600">- Update to 0.25.3 (rhbz#2279201)</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.5-1" date="1748779200">- Update to 0.25.5 (#2365532)</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.8-1" date="1752926400">- Update to 0.25.8 (#2370286)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25.8-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.25.10-1" date="1759060800">- Update to 0.25.10 (#2393687)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.25.10-3" date="1783684800">- Update dialoguer to 0.12
- No longer allow similar 2.6.0, since we have 2.7.0
- Update `License` expression</changelog>
</package>
<package pkgid="fb91e58af181c5f31d022c90ffc67eb9b043e4a7cd5043303ce6f46c2ff6089c" name="uv-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.11.28" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.21-3" date="1781784000">- Fix skipping tests that require alternative versions of Python</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.21-4" date="1781784001">- Rebuilt with `reflink-copy` 0.1.30</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.22-1" date="1782043200">- Update to 0.11.22</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.23-1" date="1782043201">- Update to 0.11.23 (close RHBZ#2490666)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.24-1" date="1782302400">- Update to 0.11.24 (close RHBZ#2492025)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.25-1" date="1782561600">- Update to 0.11.25</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.26-1" date="1782907200">- Update to 0.11.26 (close RHBZ#2495097)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.26-2" date="1782993600">- Update to 0.11.26 (close RHBZ#2495097)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.27-1" date="1783684800">- Update to 0.11.27 (close RHBZ#2497560)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.28-1" date="1783684801">- Update to 0.11.28 (close RHBZ#2497922)</changelog>
</package>
<package pkgid="b889fedbb5dd40f4d5165f56e61b60e407a70bf57763b080ccbdcfee02fca3a6" name="uv-debugsource" arch="aarch64">
  <version epoch="0" ver="0.11.28" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.21-3" date="1781784000">- Fix skipping tests that require alternative versions of Python</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.21-4" date="1781784001">- Rebuilt with `reflink-copy` 0.1.30</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.22-1" date="1782043200">- Update to 0.11.22</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.23-1" date="1782043201">- Update to 0.11.23 (close RHBZ#2490666)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.24-1" date="1782302400">- Update to 0.11.24 (close RHBZ#2492025)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.25-1" date="1782561600">- Update to 0.11.25</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.26-1" date="1782907200">- Update to 0.11.26 (close RHBZ#2495097)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.26-2" date="1782993600">- Update to 0.11.26 (close RHBZ#2495097)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.27-1" date="1783684800">- Update to 0.11.27 (close RHBZ#2497560)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.11.28-1" date="1783684801">- Update to 0.11.28 (close RHBZ#2497922)</changelog>
</package>
<package pkgid="9bd61d4b896c724122e6f10f2b45d7f188b28c130e24659a58b4ed301d090567" name="wasmedge-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.17.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.14.1-4" date="1738843200">- Apply a patch to suppress deprecated warnings</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-1" date="1758024000">- Release 0.15.0</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-2" date="1758110400">- Use llvm19</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-3" date="1758110401">- Require lld19 when building</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-4" date="1767355200">- Remove the unused patch file</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-5" date="1767355201">- Backport fix for CVE-2025-22921</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.0-1" date="1780401600">- Release 0.17.0</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.1-1" date="1783339200">- Release 0.17.1</changelog>
</package>
<package pkgid="e923e050aff2118b009938f5076f41371bd73fde6207467629f785e06f74f38b" name="wasmedge-debugsource" arch="aarch64">
  <version epoch="0" ver="0.17.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.14.1-4" date="1738843200">- Apply a patch to suppress deprecated warnings</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-1" date="1758024000">- Release 0.15.0</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-2" date="1758110400">- Use llvm19</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-3" date="1758110401">- Require lld19 when building</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-4" date="1767355200">- Remove the unused patch file</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-5" date="1767355201">- Backport fix for CVE-2025-22921</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.0-1" date="1780401600">- Release 0.17.0</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.1-1" date="1783339200">- Release 0.17.1</changelog>
</package>
<package pkgid="e61c36321886a749e0df19651e937d08b21d2b801d5da2746f2e31edec5877d5" name="wasmedge-rt-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.17.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.14.1-4" date="1738843200">- Apply a patch to suppress deprecated warnings</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-1" date="1758024000">- Release 0.15.0</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-2" date="1758110400">- Use llvm19</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-3" date="1758110401">- Require lld19 when building</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-4" date="1767355200">- Remove the unused patch file</changelog>
  <changelog author="dm4 &lt;dm4@secondstate.io&gt; - 0.15.0-5" date="1767355201">- Backport fix for CVE-2025-22921</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.0-1" date="1780401600">- Release 0.17.0</changelog>
  <changelog author="hydai &lt;hydai@hyd.ai&gt; - 0.17.1-1" date="1783339200">- Release 0.17.1</changelog>
</package>
<package pkgid="9da847ae58022703b1a7d528f9e716ae7ddbc3fa39404b9842feb2e58a05ca43" name="weechat-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.9.3" rel="1.el10_3"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590400">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
</package>
<package pkgid="8a1b79b1a3bf6e9e1ec6c7de9bdba5bdba921c3ce49e95c5da921117d77e11c8" name="weechat-debugsource" arch="aarch64">
  <version epoch="0" ver="4.9.3" rel="1.el10_3"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590400">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
</package>
<package pkgid="9955849e87e8e01b52f02aad042159035378ad8e98ded892d1acd5c803ba6732" name="zabbix7.0-agent-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="827f975f9b36752844825850abde1474d07f2430cc3ecd602231e2f7d0e72df8" name="zabbix7.0-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="4bf94d1f93b6fe67ee382c096e2b12facb24ed7ab2c9c4a08e9826ca66fe2bd6" name="zabbix7.0-debugsource" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="5209bd29a4a31d9608a824d696b1e3923d178a3de68d6c3b082c9c2b30ccf650" name="zabbix7.0-proxy-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="792874a6647de1fcaa18bf440af2b93a6e7a5d3020d26c997f7d6533160d3106" name="zabbix7.0-proxy-pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="40852da1c193ba3e216b782e013eca847266dc584c7766a6c44dab866524d016" name="zabbix7.0-proxy-sqlite3-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="703fcf77ce63fabbfc9e91cebf40d34b591c5d5a0bad3953dc0ecbf19bc46320" name="zabbix7.0-server-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="fdea8cb5f3b47428e964589bac2be66ddb0eb5e0608ec511f89abafa692cbdeb" name="zabbix7.0-server-pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.0.28" rel="1.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
</otherdata>