<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="76">
<package pkgid="fe6a27f07690b26307c21026acbb6e4facb3ae713e7ad333138aed1fbdb89d5b" name="3proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="1.el10_3"/>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.7-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.0.0-1" date="1787400000">- Update to 1.0.0</changelog>
</package>
<package pkgid="24779d486407d206b264d617d468f2b270b9c644ed110731db3693d5809cfee1" name="3proxy-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="1.el10_3"/>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.7-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.0.0-1" date="1787400000">- Update to 1.0.0</changelog>
</package>
<package pkgid="ffea70c95c34d59c81a142e0a25d6348544826d599465df7e124cdb3c6620b40" name="b3sum-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.7" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-1" date="1745236800">- Update to version 1.8.2; Fixes RHBZ#2361298</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-3" date="1761393600">- Allow duct 1.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.3-1" date="1767960000">- Update to version 1.8.3; Fixes RHBZ#2428096</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.4-1" date="1774958400">- Update to version 1.8.4; Fixes RHBZ#2453125</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.5-1" date="1777291200">- Update to version 1.8.5; Fixes RHBZ#2461747</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.5-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1786017600">- Update to version 1.8.6; Fixes RHBZ#2511862</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.7-1" date="1787572800">- Update to version 1.8.7; Fixes RHBZ#2520162</changelog>
</package>
<package pkgid="579b2bb891ca416ade6ea1fca93a2452d93030a796d93f634e788b535f06eb1b" name="betterleaks-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
</package>
<package pkgid="41b15022cb7edcdf7834f3bbf200c81469ee77237c3f0a2102595f54ed9ea34a" name="betterleaks-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
</package>
<package pkgid="c2a4c36e7297e27d1afe0ad7e79c58e804e0f4ff9b745305f26bf521de9c1f17" name="bluechi-agent-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="a80731fff2ed6db64ea5b8c4adbbf52a7e91dca4a284bf11d04b9d05235846ac" name="bluechi-controller-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="0ab4aa54cc230a8cba195d4ff08026e691ca19c1d30f64bf6af72a88ed75b8ac" name="bluechi-ctl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="2c30b9336a033c6e7e5886fbdcbf0f352be542090a7ce02a2296b3be590acb2c" name="bluechi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="9e6285b382e7a88ac82c04de0d40684c369df918ec6924dee324e210fdfe22c9" name="bluechi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="360b9c05d014d6fa567f956d698e286cb16666d4b103415f55a08eb6ac267199" name="bluechi-is-online-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="e031dfc0cc833c34fe41e36689e5b7c21b68949f428b13490b01356a30f6c04c" name="c-icap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="9befd30221923578c8b9011de0b2a9853e6fdc5bb8e30e0101b30a713f05841e" name="c-icap-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="f976e3f2a283f007a9ffddb061b51ca5611f32e71722ffe98872ef8343c4382b" name="c-icap-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="ab4afd41ecf26e44d8fb8828f7b49a5f68ec6c299fb1caa009248c9afa41a32f" name="cargo-c-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.10.24" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.19-1" date="1771243200">- Update to version 0.10.19+cargo-0.93.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.10.19-2" date="1774180800">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-1" date="1779969600">- Update to version 0.10.20+cargo-0.94.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-2" date="1779969601">- Partially restore debuginfo on i686 to fix debuginfo package build</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.21-1" date="1780660800">- Update to version 0.10.21+cargo-0.95.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.10.21-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.21-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.22-1" date="1786363200">- Update to version 0.10.22+cargo-0.96.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.23-1" date="1787054400">- Update to version 0.10.23+cargo-0.97.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.24-1" date="1787054401">- Update to version 0.10.24+cargo-0.98.0; Fixes RHBZ#2366918</changelog>
</package>
<package pkgid="ef1a9cbe0b46ba3ddf33b264adf1b5474584c7f370748f1dbd1d2dce9df5235c" name="chromium-common-debuginfo" arch="aarch64">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="f59f8339c18b10cb30accf13cbb4fd372b40aa10d14bbe65c1ebf65f97d3b067" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="2eb8dd3740963b3a548745852334a7ef80c17a37ab1730373bf2d898988ed93d" name="chromium-headless-debuginfo" arch="aarch64">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="f90f005e37f566aa2e1ae9e41241c9f27b4b7a72bed15c7854e0f2ccbb0b7282" name="chromium-qt5-ui-debuginfo" arch="aarch64">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="186ec7009331c0869f0cb0a5615c1d112f7dc23eae27ed698c71432cc243b78a" name="chromium-qt6-ui-debuginfo" arch="aarch64">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="9f65dab6d36bc346af1a1ed119acec0808a483d8c4ec26a8828d761cbca76b80" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="35034ce033313a97c2b1e545248fef4c0760656cbb0d60afcf0a611f01068f96" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="4130d7a258937eb3ce0786064da342a1a7e2766f6c9c50f57789ef0d6e8ce345" name="clamav-freshclam-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="005a4463488c6e922f35dfdd752a3c263511c04286caf2b126584cdabc9de6e6" name="clamav-lib-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="68045dc10702a7b68cfd7e97188be217769c9197e90507f7016ee7acfef6c022" name="clamav-milter-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="9815ae264fc8fe392564b020c3e8f373a7b5e025700e1d9e13de53789d3d0f2d" name="clamd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="097a6712b147844e0b8304ec9011ed97afcde44e82ba711b722c4fea01819a88" name="clash-meta-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.19.30" rel="1.el10_3"/>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.20-1" date="1772193600">- Introduce clash-meta to EPEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.22-1" date="1775217600">- Update to 1.19.22 upstream release</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.24-1" date="1776686400">- Update to 1.19.24 upstream release
- Resolves: rhbz#2456356</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.25-1" date="1778932800">- Update to 1.19.25 upstream release
- Resolves: rhbz#2478200</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-2" date="1787054400">- Update license detection</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-3" date="1787054401">- Update license</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.30-1" date="1787054402">- Update to 1.19.30 upstream release
- Resolves: rhbz#2517234</changelog>
</package>
<package pkgid="eb1023bb1451d5195d33b572badd5fe256839f0bc987040cfb1502aa5caa23b0" name="clash-meta-debugsource" arch="aarch64">
  <version epoch="0" ver="1.19.30" rel="1.el10_3"/>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.20-1" date="1772193600">- Introduce clash-meta to EPEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.22-1" date="1775217600">- Update to 1.19.22 upstream release</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.24-1" date="1776686400">- Update to 1.19.24 upstream release
- Resolves: rhbz#2456356</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.25-1" date="1778932800">- Update to 1.19.25 upstream release
- Resolves: rhbz#2478200</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-2" date="1787054400">- Update license detection</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-3" date="1787054401">- Update license</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.30-1" date="1787054402">- Update to 1.19.30 upstream release
- Resolves: rhbz#2517234</changelog>
</package>
<package pkgid="0063e0f9a808586e69038dbf3ffd1d62c91c008458c70fac541bf9a37885c441" name="fastrpc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.7" rel="1.el10_3"/>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-1" date="1785240000">- 1st release</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-2" date="1786449600">- autochangelog fix</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-3" date="1786449601">- suggest hexagon-dsp-binaries</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-4" date="1786622400">- change bin to sbin</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.7-1" date="1787572800">- Update to 1.0.7</changelog>
</package>
<package pkgid="3816af6ed8a5b4c9d7e94d79abd2fa1655ccd1f4276acb12c80f0eec4a9c3523" name="fastrpc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.7" rel="1.el10_3"/>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-1" date="1785240000">- 1st release</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-2" date="1786449600">- autochangelog fix</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-3" date="1786449601">- suggest hexagon-dsp-binaries</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-4" date="1786622400">- change bin to sbin</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.7-1" date="1787572800">- Update to 1.0.7</changelog>
</package>
<package pkgid="129fde20fae0fe8d2adb39639d1f5e937adb3c470a7d0d1790ec95e673d808c2" name="fastrpc-services-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.7" rel="1.el10_3"/>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-1" date="1785240000">- 1st release</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-2" date="1786449600">- autochangelog fix</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-3" date="1786449601">- suggest hexagon-dsp-binaries</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.6-4" date="1786622400">- change bin to sbin</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;ali.koroglu@oss.qualcomm.com&gt; - 1.0.7-1" date="1787572800">- Update to 1.0.7</changelog>
</package>
<package pkgid="a53433b3b3476dbc0301724b26c6ab553e9e16445982e1dd3cdd20d16d2b5766" name="gn-debuginfo" arch="aarch64">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="cc55ee5caa3def9274feb194f62487c6cd8be3c3be6810523908d6d13b648a6f" name="gn-debugsource" arch="aarch64">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="8e0984b48d169b9670c87818f5ebc9be4abd64ba4640ac7cb7d2fde5348eeaf3" name="haveged-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="537f677fec72715f41ef28362aee23906629f9cc476a8380b7c02c8538003a5a" name="haveged-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="c70f692338b799413ee207d3d2063f4798cf2c1fa3cef62a4672671c4fb6251c" name="intel-gmmlib-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.10.1" rel="1.el10_3"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.7.2-1" date="1747310400">- Update to 22.7.2</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.0-1" date="1751630400">- Update to 22.8.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.1-1" date="1752580800">- Update to 22.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.8.1-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.2-1" date="1758024000">- Update to 22.8.2</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.9.0-1" date="1765886400">- Update to 22.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.9.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.10.0-1" date="1774612800">- Update to 22.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.10.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.10.1-1" date="1786968000">- Update to 22.10.1</changelog>
</package>
<package pkgid="ffad77e7d3a0dc6eea7a8d8bfc908d5bda93a9990ae148ca9e76d0b2a2fcb2e8" name="intel-gmmlib-debugsource" arch="aarch64">
  <version epoch="0" ver="22.10.1" rel="1.el10_3"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.7.2-1" date="1747310400">- Update to 22.7.2</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.0-1" date="1751630400">- Update to 22.8.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.1-1" date="1752580800">- Update to 22.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.8.1-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.8.2-1" date="1758024000">- Update to 22.8.2</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.9.0-1" date="1765886400">- Update to 22.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.9.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.10.0-1" date="1774612800">- Update to 22.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22.10.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 22.10.1-1" date="1786968000">- Update to 22.10.1</changelog>
</package>
<package pkgid="61e94a60fff62a11bc1837d3f02c586128fcb6a6e003d811607669452659d3d8" name="jigdo-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="9.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="0db0145bbca16c659ecafd0f3961eee5ce0f956ee7d76889511b57ef3a170ff1" name="jigdo-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="9.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="cb26515213e604d02d9cecc74d42127f8c35896b76eb10889b60b069e2f17482" name="libdeflate-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="c7cdd9dde3e49922bbe1e5c144a2bba82d7cfde1fa0bd40d0f7617af23af6a61" name="libdeflate-debugsource" arch="aarch64">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="56653a4ff94b4ab90805c18ce15ae84c1f17c515a51f38d825fe3ea3ddc8c1fd" name="libdeflate-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="d91cc03f7eb71e4e75bc47b7b90b3f5734e7dcbe5a676156c681132e99b155d9" name="log4cxx-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.8.0-1" date="1787227200">- Update to 1.8.0</changelog>
</package>
<package pkgid="c51dfc7362095a42bde80f4a3766dbeecec547d1f6eadf91fd07b3973c11e28d" name="log4cxx-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.8.0-1" date="1787227200">- Update to 1.8.0</changelog>
</package>
<package pkgid="13ff785260a2f77a3023d3fc4392b44930db5756ce4944099fdf44e5d1a25c00" name="mingw32-libdeflate-debuginfo" arch="noarch">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="139087c44554cefec6d3a7545300f4e314b1199ee4ef842c9e7ec73efd4d77e1" name="mingw64-libdeflate-debuginfo" arch="noarch">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="72ac195ed7c13211a850d9452c90cc86c17495a01a24909c96904ee34393d632" name="openbao-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="7866533850ad113afe40472440e52860607d58f9d6908c440717b9a4e82b6f20" name="openbao-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="acd4f537feef6758758d203596757447499d6ee58e1ea440140bb43604a252e5" name="opkssh-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16.0" rel="2.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="cabd017f203955160f36c1b6d3c9ad5f183735ee3f2aa23bb354d8fef5bc8eca" name="opkssh-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16.0" rel="2.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="d86e6c4429c6160e2423aaf31653599b4e60c16ca921932a0783eddf668d5e81" name="proftpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="eccde11971d7b8304bfa6a5752dec8b20412abab6461b5457eb36c9d0f261224" name="proftpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="03f71897acee7ff4030701eebda25935fdb012ae71e899fd613a60eeff68f6e1" name="proftpd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="2b529d214fed3e5c2e3c450cf01397ea3055ac1b9ae0a419c6fabb2021ab058f" name="proftpd-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="3f5ab8c92e69959cf01456311619e30086e30eddf5ac6409db0e839c330b0ad4" name="proftpd-postgresql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="679b4cd1ccf5f6046c24c35ad7a224de033a469066ca0ac2768455c3219c06d2" name="proftpd-proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="dcf2b6785898dde1dda428d15a2ad87fd42322cf9ad8d7eb2a517ffd5fa6b546" name="proftpd-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="0b6ba2c03965d240abb76edc455d97b71a548f9522a35f012a2e245e5a6e1def" name="proftpd-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="7c406d1ced6bdb6a6c21eb776fe8cbeadde61016d5910f6ff5a9fbdf739d2778" name="pyscard-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="04ffa7cb07a717fa47d8c81139a4ba4ca6f4db0137f1d7e91b593647a15efce2" name="python-cramjam-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.0" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-1" date="1744545600">- Update to 2.10.0 (close RHBZ#2359237)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-2" date="1746446400">- Report and skip test that fails with miniz_oxide&gt;0.8.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-3" date="1746446401">- Bump release to avoid downgrading the EPEL10.0 package</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-4" date="1767787200">- Drop EPEL10-specific conditionals since the branch is diverged</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-5" date="1767787201">- No longer run tests in parallel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-1" date="1767787202">- Update to 2.11.0 (close RHBZ#2383690)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-6" date="1781956800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-7" date="1781956801">- Port to PyO3 0.28
- Update `License` expression</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-8" date="1782734400">- Update to PyO3 0.29</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.12.0-1" date="1787400000">- Update to 2.12.0 (close RHBZ#2457848)</changelog>
</package>
<package pkgid="b827f4aee5f8bba18c57a1df8b33c4bc30aff81c129cdaf1d5fd502ae74db5c9" name="python-zmq-debugsource" arch="aarch64">
  <version epoch="0" ver="27.2.0" rel="1.el10_3"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.0-1" date="1749902400">- Update to 27.0.0 upstream release
- Resolves: rhbz#2372701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.1-1" date="1754222400">- Update to 27.0.1 upstream release
- Resolves: rhbz#2386160</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.2-1" date="1755777600">- Update to 27.0.2 upstream release
- Resolves: rhbz#2390015</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.1.0-1" date="1757419200">- Update to 27.1.0 upstream release
- Resolves: rhbz#2393979</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-2" date="1787400000">- Update scikit-build-core configuration</changelog>
  <changelog author="Marcin Juszkiewicz &lt;mjuszkiewicz@redhat.com&gt; - 27.1.0-4" date="1787400001">- disable green/gevent tests on riscv64</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-5" date="1787400002">- Drop conditionals for Fedora 42, soon reaching end of life</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-7" date="1787400003">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-8" date="1787400004">- Fix TestFrame.test_buffer_numpy on numpy 2.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.2.0-1" date="1787400005">- Update to 27.2.0 upstream release
- Resolves: rhbz#2520725</changelog>
</package>
<package pkgid="f74f5baec3b6f907de09e52f0c298a5b040eb2c146a2e8d59d744b14628b47bf" name="python3-cramjam-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.0" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-1" date="1744545600">- Update to 2.10.0 (close RHBZ#2359237)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-2" date="1746446400">- Report and skip test that fails with miniz_oxide&gt;0.8.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-3" date="1746446401">- Bump release to avoid downgrading the EPEL10.0 package</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-4" date="1767787200">- Drop EPEL10-specific conditionals since the branch is diverged</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-5" date="1767787201">- No longer run tests in parallel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-1" date="1767787202">- Update to 2.11.0 (close RHBZ#2383690)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-6" date="1781956800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-7" date="1781956801">- Port to PyO3 0.28
- Update `License` expression</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-8" date="1782734400">- Update to PyO3 0.29</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.12.0-1" date="1787400000">- Update to 2.12.0 (close RHBZ#2457848)</changelog>
</package>
<package pkgid="590abd0cd29086413b0a2bafab5b9c6cb084c8989479395045c7af88090805b8" name="python3-pyscard-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="4adc853dba52e80bc456a66b2c7ba6edcdf5fd98468eec9210ee268e4a2d4a0e" name="python3-pyzmq-debuginfo" arch="aarch64">
  <version epoch="0" ver="27.2.0" rel="1.el10_3"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.0-1" date="1749902400">- Update to 27.0.0 upstream release
- Resolves: rhbz#2372701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.1-1" date="1754222400">- Update to 27.0.1 upstream release
- Resolves: rhbz#2386160</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.2-1" date="1755777600">- Update to 27.0.2 upstream release
- Resolves: rhbz#2390015</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.1.0-1" date="1757419200">- Update to 27.1.0 upstream release
- Resolves: rhbz#2393979</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-2" date="1787400000">- Update scikit-build-core configuration</changelog>
  <changelog author="Marcin Juszkiewicz &lt;mjuszkiewicz@redhat.com&gt; - 27.1.0-4" date="1787400001">- disable green/gevent tests on riscv64</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-5" date="1787400002">- Drop conditionals for Fedora 42, soon reaching end of life</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-7" date="1787400003">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-8" date="1787400004">- Fix TestFrame.test_buffer_numpy on numpy 2.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.2.0-1" date="1787400005">- Update to 27.2.0 upstream release
- Resolves: rhbz#2520725</changelog>
</package>
<package pkgid="2e4be1c03cc2e611ee06e163e32739b90cb9c3c347a2c5fa75512a4ef9412bf9" name="rdiff-backup-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.6" rel="17.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="6dff0e6eb676607b8abba212f2ae4a97bac9b32d670b5656b04b2a2bcfdf9165" name="rdiff-backup-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.6" rel="17.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="2cf076661d4943328b5da0ff574baf970f20d55e53d6fa3c358eb9ae0273bf96" name="rpki-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.9" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="95815d0ecc8a51c44f68e762dd8c796541c6b59fcd32d4c984b8b4383f538406" name="rpki-client-debugsource" arch="aarch64">
  <version epoch="0" ver="9.9" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="6aefa34720d0d1af814d3fd231678c32d2a42f78d3b14cb999c20184851c7e2c" name="rust-b3sum-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.7" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-1" date="1745236800">- Update to version 1.8.2; Fixes RHBZ#2361298</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-3" date="1761393600">- Allow duct 1.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.3-1" date="1767960000">- Update to version 1.8.3; Fixes RHBZ#2428096</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.4-1" date="1774958400">- Update to version 1.8.4; Fixes RHBZ#2453125</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.5-1" date="1777291200">- Update to version 1.8.5; Fixes RHBZ#2461747</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.5-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1786017600">- Update to version 1.8.6; Fixes RHBZ#2511862</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.7-1" date="1787572800">- Update to version 1.8.7; Fixes RHBZ#2520162</changelog>
</package>
<package pkgid="70379599d083d8207aa0805b090ba19f3bc6cb471a7bc44f7a257ec6ba36a822" name="rust-cargo-c-debugsource" arch="aarch64">
  <version epoch="0" ver="0.10.24" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.19-1" date="1771243200">- Update to version 0.10.19+cargo-0.93.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.10.19-2" date="1774180800">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-1" date="1779969600">- Update to version 0.10.20+cargo-0.94.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-2" date="1779969601">- Partially restore debuginfo on i686 to fix debuginfo package build</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.21-1" date="1780660800">- Update to version 0.10.21+cargo-0.95.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.10.21-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.21-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.22-1" date="1786363200">- Update to version 0.10.22+cargo-0.96.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.23-1" date="1787054400">- Update to version 0.10.23+cargo-0.97.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.24-1" date="1787054401">- Update to version 0.10.24+cargo-0.98.0; Fixes RHBZ#2366918</changelog>
</package>
<package pkgid="91e19f0d6937eaefa89de8ed36ece7d886ca05897e590550115186b5a45bdc40" name="sympa-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.80" rel="1.el10_3"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="3383740f15993e5ae18b95aa4a73a37bb99a3c9cb96598cf8e4832f37949fbb7" name="sympa-debugsource" arch="aarch64">
  <version epoch="0" ver="6.2.80" rel="1.el10_3"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="aaf63d585df97ff78f3f907df363a0347fe4ba8987de05d8380e53040a5a122e" name="tcltls-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="2.el10_3"/>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-16" date="1736942400">- Fix building against TCL 9.0
- Fixes #2337790</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-17" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.22-18" date="1738584000">- Rebuilt for tcl/tk</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-19" date="1746619200">- Fix loading on tls 9.0 (fixes #2361443)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-20" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-21" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.22-22" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-23" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-1" date="1784635200">- update to 2.0.1</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-2" date="1785153600">- Fix License to TCL</changelog>
</package>
<package pkgid="1869f8328c1f61cc9448d0c9a469d89138cf35fa9198143870b945c8d8d24f63" name="tcltls-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="2.el10_3"/>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-16" date="1736942400">- Fix building against TCL 9.0
- Fixes #2337790</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-17" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.22-18" date="1738584000">- Rebuilt for tcl/tk</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-19" date="1746619200">- Fix loading on tls 9.0 (fixes #2361443)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-20" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-21" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.22-22" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-23" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-1" date="1784635200">- update to 2.0.1</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-2" date="1785153600">- Fix License to TCL</changelog>
</package>
<package pkgid="e9d0439ccf4738d62e41b2e68c24c4ac516014957d36c9501b2a5f89060ea8e5" name="tin-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
<package pkgid="94ab9996e0d154fe4d465152653210053ad28fafba0adadf407cc1a1e74c6bcb" name="tin-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
</otherdata>