<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="99">
<package pkgid="d83ed2a7f54794006d372ab77bfcfabe659617472fc05068f6da799f75491415" name="alembic-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.12" rel="1.el10_3"/>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.10-1" date="1763812800">- Initial import</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.11-1" date="1774267200">- Update to 1.8.11 (rhbz#2449893)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.12-1" date="1784548800">- Update to 1.8.12 upstream release
- Resolves: rhbz#2496366</changelog>
</package>
<package pkgid="13768655d1190771aa6e7edb2d0e2f6e6362db7d0743a4e9210815d0bcad6feb" name="alembic-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.12" rel="1.el10_3"/>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.10-1" date="1763812800">- Initial import</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.11-1" date="1774267200">- Update to 1.8.11 (rhbz#2449893)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.12-1" date="1784548800">- Update to 1.8.12 upstream release
- Resolves: rhbz#2496366</changelog>
</package>
<package pkgid="259cf3a6f09bcdd1473235fa87b32ad456b884048e8a2ec793066e85c8c37665" name="alembic-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.12" rel="1.el10_3"/>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.10-1" date="1763812800">- Initial import</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.11-1" date="1774267200">- Update to 1.8.11 (rhbz#2449893)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.8.12-1" date="1784548800">- Update to 1.8.12 upstream release
- Resolves: rhbz#2496366</changelog>
</package>
<package pkgid="8b50d931153a2c314a4ad6f220a4775463cf5ad58ba2ba86822995eac2ce2b63" name="bitcoin-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="b4db8877d8e0f6af334aa154b18f9a296c674ae869a84b03459fc9d13c273d78" name="bitcoin-core-debugsource" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="3ce3bfe3d17c6143b7399bf1717e1616e8b1387a649105df42a4afa8287ed935" name="bitcoin-core-desktop-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="2b73aba4103ff062377665aebd78d8e6fb43c511767e5baba6094d462e8987af" name="bitcoin-core-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="5b9101d505c24c8c868f280170199b5925e51d1f2c25a6ddf7e18a03c216d7ce" name="bitcoin-core-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="f0a28aa3f4febf36f1abd096e3edea5c7a01977a474381da7c5a41d1a597871e" name="bluefish-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.2" rel="1.el10_3"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.17-5" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.18-1" date="1761912000">- Update to 2.2.18 (rhbz#2407559)
  - Much better CSS language support
  - The color editor now also supports hsl() and rgb() style colors
  - Show colors by just hovering the mouse over a color code
  - Reinstate feature to dynamically change a shortcut key by hovering the
    mouse over a menu item and pressing a new shortcut key again; this feature
    was present in all gtk2 applications and has not been working for bluefish
    gtk3 builds until now
  - Remove the infobrowser from the build since it no longer compiles with new
    libxml versions; this plugin was already deprecated and disabled by default
    for years</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-1" date="1763812800">- Update to 2.2.19 (rhbz#2416526)
  - Fix a regression in 2.2.18 that could cause a crash when right clicking in
    a document of type Text
  - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
    main menu is now also working in the snippets menu</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.19-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.19-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1770033600">- Update to 2.4.0 (rhbz#2435810)
  - Bluefish 2.4.0 has some new features and many small improvements; it is no
    longer  a 2.2 release because backwards compatibility with the 2.0 series
    of Bluefish has been removed
  - If you upgrade from 2.0 straight to 2.4, your config files and project
    files are no longer 100% correctly loaded
  - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
    - On Linux it will be ~/.config and ~/.local/
    - On Windows it will be LocalAppData and RoamingAppData
    - On OSX it will be ~/Library/Application Support
  - The biggest new feature, still experimental, is that you can edit two
    documents side-by-side
  - You can change opening and ending tags in XML or HTML simultaneously if you
    hit [ctrl][t]
  - You can more easily save the current contents to a template
  - For new users, and also active in new projects, is a UI selection dialog,
    where you can choose between a UI optimised for web development,
    programming or just have everything enabled or disabled; this will help
    new Bluefish users to customize Bluefish in an easier way
  - There are a few fixes as well:
    - Selecting lines by dragging in the margin works more reliably
    - Paste special works more reliably
    - Line comments in Python are better detected, which is visible in the
      syntax highlighting
    - The toggle comment function is improved
    - The Windows build has better error messages when starting external
      commands fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1" date="1775131200">- Update to 2.4.1
  - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
  - The experimental "side by side" feature that was introduced in 2.4.0 is no
    longer experimental and is fully stable now
  - A new feature is that Bluefish will automatically adjust the text colours
    for people that use a dark desktop theme
  - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
    renewed
  - A critical bug and a regression in the split view function has been fixed
  - The windows build has some minor improvements
  - Several translations are updated</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.2-1" date="1784376000">- Update to 2.4.2 (rhbz#2501999)
  - Bluefish 2.4.2 has a few new features and a few fixes
  - The most visible change is that Bluefish detects icon themes, and has
    built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
    improvement for the visual integration of Bluefish on a KDE desktop
  - The most important fix is for a segfault that could occur if a filename on
    disk has a specific broken UTF-8 encoding
  - Some small improvements are reduced memory usage when working with 100+
    files simultaneously, some translation improvements, and the &lt;meta&gt;
    author field is now configurable</changelog>
</package>
<package pkgid="f358d24db9f08a375d9e338e3b5b4fd972e5947aeca2526e87da981e0cfc549c" name="bluefish-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.4.2" rel="1.el10_3"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.17-5" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.18-1" date="1761912000">- Update to 2.2.18 (rhbz#2407559)
  - Much better CSS language support
  - The color editor now also supports hsl() and rgb() style colors
  - Show colors by just hovering the mouse over a color code
  - Reinstate feature to dynamically change a shortcut key by hovering the
    mouse over a menu item and pressing a new shortcut key again; this feature
    was present in all gtk2 applications and has not been working for bluefish
    gtk3 builds until now
  - Remove the infobrowser from the build since it no longer compiles with new
    libxml versions; this plugin was already deprecated and disabled by default
    for years</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-1" date="1763812800">- Update to 2.2.19 (rhbz#2416526)
  - Fix a regression in 2.2.18 that could cause a crash when right clicking in
    a document of type Text
  - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
    main menu is now also working in the snippets menu</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.19-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.19-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1770033600">- Update to 2.4.0 (rhbz#2435810)
  - Bluefish 2.4.0 has some new features and many small improvements; it is no
    longer  a 2.2 release because backwards compatibility with the 2.0 series
    of Bluefish has been removed
  - If you upgrade from 2.0 straight to 2.4, your config files and project
    files are no longer 100% correctly loaded
  - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
    - On Linux it will be ~/.config and ~/.local/
    - On Windows it will be LocalAppData and RoamingAppData
    - On OSX it will be ~/Library/Application Support
  - The biggest new feature, still experimental, is that you can edit two
    documents side-by-side
  - You can change opening and ending tags in XML or HTML simultaneously if you
    hit [ctrl][t]
  - You can more easily save the current contents to a template
  - For new users, and also active in new projects, is a UI selection dialog,
    where you can choose between a UI optimised for web development,
    programming or just have everything enabled or disabled; this will help
    new Bluefish users to customize Bluefish in an easier way
  - There are a few fixes as well:
    - Selecting lines by dragging in the margin works more reliably
    - Paste special works more reliably
    - Line comments in Python are better detected, which is visible in the
      syntax highlighting
    - The toggle comment function is improved
    - The Windows build has better error messages when starting external
      commands fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1" date="1775131200">- Update to 2.4.1
  - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
  - The experimental "side by side" feature that was introduced in 2.4.0 is no
    longer experimental and is fully stable now
  - A new feature is that Bluefish will automatically adjust the text colours
    for people that use a dark desktop theme
  - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
    renewed
  - A critical bug and a regression in the split view function has been fixed
  - The windows build has some minor improvements
  - Several translations are updated</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.2-1" date="1784376000">- Update to 2.4.2 (rhbz#2501999)
  - Bluefish 2.4.2 has a few new features and a few fixes
  - The most visible change is that Bluefish detects icon themes, and has
    built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
    improvement for the visual integration of Bluefish on a KDE desktop
  - The most important fix is for a segfault that could occur if a filename on
    disk has a specific broken UTF-8 encoding
  - Some small improvements are reduced memory usage when working with 100+
    files simultaneously, some translation improvements, and the &lt;meta&gt;
    author field is now configurable</changelog>
</package>
<package pkgid="1bfb669770caaae6c5555745d77042992c6c54f655f031c3f23610df3b985df0" name="chromium-common-debuginfo" arch="ppc64le">
  <version epoch="0" ver="150.0.7871.128" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
</package>
<package pkgid="c48902d5f191f569726c046f303887abe00c8cfce08df933b55885cf4dcdc5b3" name="chromium-debuginfo" arch="ppc64le">
  <version epoch="0" ver="150.0.7871.128" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
</package>
<package pkgid="6095e754e840e57be4dd9d63a243f8882a7b2b9c44c5b6de45a4107fedad73a3" name="chromium-headless-debuginfo" arch="ppc64le">
  <version epoch="0" ver="150.0.7871.128" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
</package>
<package pkgid="e6fdca3e73792388506ed32c95b72c2e335999f4c11254e87bdd210d1f644136" name="chromium-qt5-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="150.0.7871.128" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
</package>
<package pkgid="9e93cf7d845669879d59338d3d5e39d3033e2a1a642b3cbf00d81b6f7aa97858" name="chromium-qt6-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="150.0.7871.128" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.155-1" date="1781697600">- Update to 149.0.7827.155
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
</package>
<package pkgid="144626f0358faa8e04966626890f6880fa90218c9019f456bf6377d922e9090c" name="converseen-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_3"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="758aa8952497bf781fa85c14de46b569b33eae02860840e3290c0b61fda098d1" name="converseen-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_3"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="1c98628046018efcd48c951baad9693f733aa1b4fe1e0ca3a91d056f31323d50" name="cube-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="4a78be5ddfbfa50e871982b25f626ebdb5d3fc05b4cf6abe3efb8d21b1005f3b" name="cube-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="51acd479964b5c341bc3ccdd9bb31c7cb1b2b5237b5a83b5cafac29f4f1bcc0e" name="cube-guilib-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="95077e27a1f7ef574c0032529f67587686f9637d5b75dc437d4679c251f89876" name="cube-guilib-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="e55e5d75761a9704577d2ee51c1633b28f5c68539e4ed02f37b8d727eaba49c2" name="cube-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="909f7f013a2ea4639c28128c7ad05868775a81dad03ffe07a8ea9dd2c7eae4d7" name="cube-libs-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.9.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="ece9f985e1fb7c281f6ecc8d06e595c300c834489f2844f3d47405df01a85fc8" name="cxxbridge-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.197" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.194-1" date="1779105600">- Initial import (#2478032)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.197-1" date="1784030400">- Update to version 1.0.197; Fixes RHBZ#2497093</changelog>
</package>
<package pkgid="63bff3ac5d4170a834f8625ff106ee95ebe8ed3683b1a878907a39e79968ca0d" name="haveged-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="82190a2bd2c2eef90ba461416f5cc60c228ae164bb16161c9a31ac10f43a72b6" name="haveged-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="c259bcfdcfbc357cac96f5f099946e51bdaa76e543c2b47a3644364fbd53ac3a" name="kokkos-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.0.2" rel="1.el10_3"/>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt; - 4.4.01-4" date="1738756800">- Use ROCM_INCLUDE for install</changelog>
  <changelog author="Cezary Skrzy&#x144;ski &lt;cezary.skrzynski@ng-analytics.com&gt; - 4.5.01-1" date="1739534400">- Version bump to v4.5.01 (bug #2264022)</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.5.01-2" date="1739620800">- update license to Apache-2.0 WITH LLVM-exception</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.6.00-1" date="1750420800">- Version bump to v4.6.00</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.6.00-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.6.02-1" date="1754136000">- Version bump to v4.6.02</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt; - 4.6.02-2" date="1758888000">- Rebuild for rocm-hip-7
- Fixes: rhbz#2399678</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.6.02-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.7.02-1" date="1771675200">- Version bump to v4.7.02</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 5.0.2-1" date="1776081600">- Version bump to v5.0.2</changelog>
</package>
<package pkgid="f53b72d53f16023533823584a22433bfbfacd784cb6e6c5362ed85327e19d3a2" name="kokkos-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.0.2" rel="1.el10_3"/>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt; - 4.4.01-4" date="1738756800">- Use ROCM_INCLUDE for install</changelog>
  <changelog author="Cezary Skrzy&#x144;ski &lt;cezary.skrzynski@ng-analytics.com&gt; - 4.5.01-1" date="1739534400">- Version bump to v4.5.01 (bug #2264022)</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.5.01-2" date="1739620800">- update license to Apache-2.0 WITH LLVM-exception</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.6.00-1" date="1750420800">- Version bump to v4.6.00</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.6.00-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.6.02-1" date="1754136000">- Version bump to v4.6.02</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt; - 4.6.02-2" date="1758888000">- Rebuild for rocm-hip-7
- Fixes: rhbz#2399678</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.6.02-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 4.7.02-1" date="1771675200">- Version bump to v4.7.02</changelog>
  <changelog author="Richard Berger &lt;richard.berger@outlook.com&gt; - 5.0.2-1" date="1776081600">- Version bump to v5.0.2</changelog>
</package>
<package pkgid="81e2c208fb684187e03b463cd0d9e1b476af914abef88e47e00bbf5ae1b35793" name="lazarus-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8" rel="1.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="be0afd0dd742b40ed31e7ebf014b33cb9e226675dab639352287b992656499d7" name="lazarus-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.8" rel="1.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="da252f45cd21c440a3d1b56b50376b635fb6678d4aedd3dbde500863c387aee9" name="lazarus-ide-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8" rel="1.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="16c008f0d7a673168af9ddcb5e409774abb07ed6beb4e9b18b13024a37de4de8" name="lazarus-lcl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8" rel="1.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="fdafb0a7569a1d3dd3011832448eff5b5e549bd41d89c42bc7b529693c5cfb90" name="lazarus-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8" rel="1.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="24179ed7761698d07f08efe448b07c5f450efb47668318e59b8b3c2a4837ec98" name="libbitcoinkernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="24bba11704a7e9a3cc9324e7e9dab56dd6eb723e95f85afb18c7e2407feffc32" name="libbitcoinkernel-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="31.1" rel="1.el10_3"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="a06d9d537a98ef56d6b816cf35dcf475fdeea32afb27a4c2e249034f631eb2ab" name="libbson-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
</package>
<package pkgid="72fc5191ae7fe80d45abedeb4a3ee3de74fc780bdfb5c9ffdc8a6fabce513e6d" name="libmamba-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="4.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-1" date="1764244800">- Update to 2.4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-2" date="1767960000">- Add patch for gcc 16 support</changelog>
  <changelog author="Cristian Le &lt;git@lecris.dev&gt; - 2.4.0-3" date="1784462400">- Use the non-deprecated SKBUILD environment variable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1784548800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.5.0-1" date="1784548801">- Update to 2.5.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.5.0-3" date="1784548802">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.5.0-4" date="1784548803">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.6.0-1" date="1784548804">- Update to 2.6.0 upstream release
- Resolves: rhbz#2312187</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.0-3" date="1784548805">- Rebuilt for fmt/spdlog</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-4" date="1784548806">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="218a0987c0267500798ccbc0c7a80f7074aa148043a20de67a82d049c9474c70" name="libmamba-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="4.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-1" date="1764244800">- Update to 2.4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-2" date="1767960000">- Add patch for gcc 16 support</changelog>
  <changelog author="Cristian Le &lt;git@lecris.dev&gt; - 2.4.0-3" date="1784462400">- Use the non-deprecated SKBUILD environment variable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1784548800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.5.0-1" date="1784548801">- Update to 2.5.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.5.0-3" date="1784548802">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.5.0-4" date="1784548803">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.6.0-1" date="1784548804">- Update to 2.6.0 upstream release
- Resolves: rhbz#2312187</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.0-3" date="1784548805">- Rebuilt for fmt/spdlog</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-4" date="1784548806">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="19b02b9091991bc777619ff341124a0f6b1d83c69eafd7d0482e8397dcdaa9a2" name="libmongocrypt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.17.2-1" date="1771502400">- update to 1.17.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.17.3-1" date="1775649600">- update to 1.17.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.0-1" date="1777982400">- update to 1.18.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.1-1" date="1778587200">- update to 1.18.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.2-1" date="1779710400">- update to 1.18.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.0-1" date="1781006400">- update to 1.19.0
- drop html documentation</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.1-1" date="1781784000">- update to 1.19.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.2-1" date="1782216000">- update to 1.19.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.20.0-1" date="1782993600">- update to 1.20.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.20.1-1" date="1784635200">- update to 1.20.1</changelog>
</package>
<package pkgid="6363bcd3bf233823b524e0e1302b5d9353b47d5b963226bd8bd96371f0d1f7da" name="libmongocrypt-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.17.2-1" date="1771502400">- update to 1.17.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.17.3-1" date="1775649600">- update to 1.17.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.0-1" date="1777982400">- update to 1.18.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.1-1" date="1778587200">- update to 1.18.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.18.2-1" date="1779710400">- update to 1.18.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.0-1" date="1781006400">- update to 1.19.0
- drop html documentation</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.1-1" date="1781784000">- update to 1.19.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.2-1" date="1782216000">- update to 1.19.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.20.0-1" date="1782993600">- update to 1.20.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.20.1-1" date="1784635200">- update to 1.20.1</changelog>
</package>
<package pkgid="8798ff6f6f27f1460dd652daf10f1513216725c19829b9f6dbe2893efcffc6e5" name="mamba-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="4.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-1" date="1764244800">- Update to 2.4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-2" date="1767960000">- Add patch for gcc 16 support</changelog>
  <changelog author="Cristian Le &lt;git@lecris.dev&gt; - 2.4.0-3" date="1784462400">- Use the non-deprecated SKBUILD environment variable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1784548800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.5.0-1" date="1784548801">- Update to 2.5.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.5.0-3" date="1784548802">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.5.0-4" date="1784548803">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.6.0-1" date="1784548804">- Update to 2.6.0 upstream release
- Resolves: rhbz#2312187</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.0-3" date="1784548805">- Rebuilt for fmt/spdlog</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-4" date="1784548806">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="986bfaad10b49eb57c7bd0f243d7157495e0ec2c2577c7f38f0ce6a42d438dff" name="mapserver-debuginfo" arch="ppc64le">
  <version epoch="0" ver="8.6.5" rel="1.el10_3"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="6e7fb542740c917b9231edfa6ac203a2c75fd36a91d9382ec0b91afb18364b06" name="mapserver-debugsource" arch="ppc64le">
  <version epoch="0" ver="8.6.5" rel="1.el10_3"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="08c5f50fce10d5caa326ce9444335aafbb3f8a6f5e5bf135d24df62ef9fa1090" name="mapserver-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="8.6.5" rel="1.el10_3"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="ce613298a058499a2d5946e9eadb5d49369f7ef63fec47743bb4680e397e98bd" name="mimedefang-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.7.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.6-1" date="1740830400">- Upgrade to 3.6 (#2301647)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.6-2" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.7.1-1" date="1784548800">- Upgrade to 3.7.1 (#2500792)</changelog>
</package>
<package pkgid="62d8f5b8f26e49b9e85b9ebe909c3c5477861d3d39b4f85bfd87042877c50acd" name="mimedefang-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.7.1" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.6-1" date="1740830400">- Upgrade to 3.6 (#2301647)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.6-2" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.7.1-1" date="1784548800">- Upgrade to 3.7.1 (#2500792)</changelog>
</package>
<package pkgid="382bf731285374dfd64a911bf812ebe582406698c3a85065d92ef88c7a37adc4" name="mongo-c-driver-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
</package>
<package pkgid="1008b54f0b7129b1dba02f86fc63ea0da92a047dd8823bbf577c830fdf3dad2f" name="mongo-c-driver-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
</package>
<package pkgid="46bacc84e6bbeeb07aa8e4f98f9aa41b4efae582d47f13a784d313047631357b" name="mongo-c-driver-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="1.el10_3"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.4-1" date="1746619200">- update to 1.30.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.5-1" date="1750248000">- update to 1.30.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
</package>
<package pkgid="850d02cf3b0c9c6044c71dd75dd4847e7ee7356117be06cdc4f8eded64db9334" name="msgpack-c-debuginfo" arch="ppc64le">
  <version epoch="0" ver="7.0.0" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.0-1" date="1781006400">- Initial import</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.0-2" date="1781006401">- Fix INSTALL_INSTALL interface so users get the correct include directory</changelog>
</package>
<package pkgid="9f906a06cc6c3503b2984dd592504d8c7a29edd22fb81f957bfc6203da933036" name="msgpack-c-debugsource" arch="ppc64le">
  <version epoch="0" ver="7.0.0" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.0-1" date="1781006400">- Initial import</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.0-2" date="1781006401">- Fix INSTALL_INSTALL interface so users get the correct include directory</changelog>
</package>
<package pkgid="0cddae396542c17b27b81cc9e2affee87a19cadfacfdf0841bcc6988c6ee637c" name="nuclei-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.11.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-5" date="1775131200">- Unretirement request:
  https://forge.fedoraproject.org/releng/tickets/issues/13296</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.7.1-1" date="1775131201">- Unretire and update to 3.7.1 (Resolves: rhbz#2445513)</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.8.0-1" date="1776686400">- Update to 3.8.0</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.11.0-1" date="1783944000">- Update to 3.11.0</changelog>
</package>
<package pkgid="afb572b6b1132c21046d71e28fe1924d30a665a4af56c2a9ebc66496739dc871" name="nuclei-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.11.0" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-5" date="1775131200">- Unretirement request:
  https://forge.fedoraproject.org/releng/tickets/issues/13296</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.7.1-1" date="1775131201">- Unretire and update to 3.7.1 (Resolves: rhbz#2445513)</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.8.0-1" date="1776686400">- Update to 3.8.0</changelog>
  <changelog author="Emir Akdag &lt;infraw.linux@proton.me&gt; - 3.11.0-1" date="1783944000">- Update to 3.11.0</changelog>
</package>
<package pkgid="f201df11d46f8a07d307df07b82c09cdbadd7521b31c16c43ad4b309d0254f52" name="openbao-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-1" date="1761220800">- update to upstream 2.4.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
</package>
<package pkgid="a0af2c58414d4cac080728320f84c4292768f3291e8965c4fe82bc71d959351f" name="openbao-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-1" date="1761220800">- update to upstream 2.4.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
</package>
<package pkgid="81dc8a2b005a595d4eea46fece655c1d53b66a42032a54002eada174fb56c4fe" name="opkssh-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576000">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576001">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576002">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
</package>
<package pkgid="f034de7cbc28703f2c62456d5800171712c64a875b84d7792c460d4871b1998f" name="opkssh-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576000">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576001">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576002">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
</package>
<package pkgid="865ed26095b58874fcf5b530ea8a00f469e9676fa3486803f6343ec3e577ea22" name="perl-YAML-Syck-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.47" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-1" date="1779710400">- Update to 1.46
  Bug Fixes:
  - Preserve string nature of numeric-looking values in Dump; pure strings (POK
    only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
    (GH#199, GH#200)
  - Accept trailing commas in flow sequences and mappings ([a, b,] and
    {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
  Maintenance:
  - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
    prior to 5.24 in perldocker containers (GH#197, GH#198)
  - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
    exclude .claude/ from distribution</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1784030400">- Update to 1.47
  Security:
  - Fix four libsyck memory-safety CVEs reachable from the default
    YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
    - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
      caused by signed-char indexing of the decode table on !!binary input
    - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
      between the node and the anchors table
    - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
      newline scan during block-scalar parsing (incomplete-fix follow-on
      to CVE-2025-11683)
    - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
      anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
  - Harden syck_base64dec() to bounds-check each read so it cannot run past a
    non-NUL-terminated input buffer (defense-in-depth for callers passing raw
    buffers; GH#213)
  Bug Fixes:
  - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
    nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
    matching Dump (GH#204)
  - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
    Dump so they roundtrip with ImplicitTyping instead of reloading as plain
    strings (GH#201)
  Maintenance:
  - CI: add an AddressSanitizer job that builds the XS with
    -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
    libsyck memory-safety defects; de-pin the libasan version so it tracks the
    runner's GCC (GH#213)</changelog>
</package>
<package pkgid="83f4c3a3ad94e3544b00432d5b058dcc1e4f48b514c57e57d4321234fd0c7a67" name="perl-YAML-Syck-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.47" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-1" date="1779710400">- Update to 1.46
  Bug Fixes:
  - Preserve string nature of numeric-looking values in Dump; pure strings (POK
    only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
    (GH#199, GH#200)
  - Accept trailing commas in flow sequences and mappings ([a, b,] and
    {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
  Maintenance:
  - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
    prior to 5.24 in perldocker containers (GH#197, GH#198)
  - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
    exclude .claude/ from distribution</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1784030400">- Update to 1.47
  Security:
  - Fix four libsyck memory-safety CVEs reachable from the default
    YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
    - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
      caused by signed-char indexing of the decode table on !!binary input
    - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
      between the node and the anchors table
    - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
      newline scan during block-scalar parsing (incomplete-fix follow-on
      to CVE-2025-11683)
    - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
      anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
  - Harden syck_base64dec() to bounds-check each read so it cannot run past a
    non-NUL-terminated input buffer (defense-in-depth for callers passing raw
    buffers; GH#213)
  Bug Fixes:
  - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
    nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
    matching Dump (GH#204)
  - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
    Dump so they roundtrip with ImplicitTyping instead of reloading as plain
    strings (GH#201)
  Maintenance:
  - CI: add an AddressSanitizer job that builds the XS with
    -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
    libsyck memory-safety defects; de-pin the libasan version so it tracks the
    runner's GCC (GH#213)</changelog>
</package>
<package pkgid="b84f92107d30ef82ef6eac3466d5ddd132ded491cdbe51dbb987d3439d9100f4" name="petsc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="a59add698cd6355923181591910bb99f0880a2d22e58e0d2e85272457b0cf038" name="petsc-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="2972e9af38d8d40ba7c424348c5ebd7bfe3eed59f68c89f48ca90ff959dcb837" name="petsc-mpich-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="9fce766756824edccaac0a1f0dca60993895740502d5eb2a7787eb9aa536a924" name="petsc-openmpi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="16798c85810bccd082a036e0e19813f4bf6b7de8ea8e7c3bb85740db16141eb5" name="petsc64-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="5c77472632e9190597a8d1db570c3bda4b87e806a8891aaf3ba5bd4e6e7e22d0" name="php-mapserver-debuginfo" arch="ppc64le">
  <version epoch="0" ver="8.6.5" rel="1.el10_3"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="b73116b06d21dc8dd23ba9299456515874a0357a1ce4a49b250237c81d4cce68" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="3b7c0637830d4ff512a6f185fe0bf2ba72e8a6916bf9716aa61b288c41e9c75a" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="9deff4d5e8d249765c2b719fc608fc2f7a4cc36614e77602f153c95ad5e94560" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="276bdb252604a90305e3c57aa192776fa7144f4a08e271a1e16a4f6cd94518f3" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="0ee20584d290f893a6183ae1e2ad9b5a9999650868ac3f741c997d1e616dfbf0" name="proftpd-postgresql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="8dd5313bc13d9ec3057d9a9bc3779bee247a10153cd43c88e8f46ddc104de0a1" name="proftpd-proxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="f1688df849eece9484393cf3d43b592324c3958a4c927adde542b93434d762e3" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="08f1444f3f90859e5e2c23db4d7e17ef0fea73dd0a2fb3d9b52ca81c727635d3" name="proftpd-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9c" rel="3.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="00d77354cd520d87446e9aada1e93f857984aea117e8b5ddec0cc8678649a9cf" name="python3-libmambapy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.0" rel="4.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-1" date="1764244800">- Update to 2.4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.4.0-2" date="1767960000">- Add patch for gcc 16 support</changelog>
  <changelog author="Cristian Le &lt;git@lecris.dev&gt; - 2.4.0-3" date="1784462400">- Use the non-deprecated SKBUILD environment variable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1784548800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.5.0-1" date="1784548801">- Update to 2.5.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.5.0-3" date="1784548802">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.5.0-4" date="1784548803">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.6.0-1" date="1784548804">- Update to 2.6.0 upstream release
- Resolves: rhbz#2312187</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.0-3" date="1784548805">- Rebuilt for fmt/spdlog</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-4" date="1784548806">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="86fe9a3813125b6ca7d4d9ccda5670d2b0704a70ec708295f98af8a6b33c8dd4" name="python3-petsc-mpich-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="17975640eae824f0f3a7507c77cf7717c3aae90c4785cd7ae3a86030ed59e99b" name="python3-petsc-openmpi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.24.6" rel="2.el10_3"/>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-1" date="1767700800">- Release 3.24.3</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-2" date="1768219200">- Stop using deprecated macros (rhbz#2377370)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt;" date="1768305600">- Disable Python PETSc on s390x</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.3-4" date="1768305601">- Fix Unclosed %%if</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.3-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-1" date="1769860800">- Release 3.24.4</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.4-2" date="1769947200">- Add pyproject-rpm-macros BR package for EPEL10</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.5-1" date="1772452800">- Release 3.24.5</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-1" date="1775131200">- Release 3.24.6 (rhbz#2452894)</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.24.6-2" date="1784462400">- Add finclude directory (rhbz#2502195)</changelog>
</package>
<package pkgid="80fd1599ad83e636899d85dfc0e7281aeb85f51a1448f040b726ecc0d5655d94" name="qt5pas-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.16" rel="40801.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="24545fe2c136ae961e4989859c7e32fdaad4d36c3dd99a9439f054fff312c71d" name="qt6pas-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.10" rel="40801.el10_3"/>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.6-2" date="1733745600">- Add a patch to fix SIGSEGV in programs built using Qt5 widgetset</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 3.8-1" date="1737547200">- Update to v3.8</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-1" date="1746878400">- Update to v4.0
- Drop Patch1 (crash in lazbuild) - issue fixed upstream
- Drop Patch2 (Qt5 segfault) - backport from this release
- Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -&gt; "LGPL-2.0-only WITH Independent-modules-exception")</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.0-2" date="1748174400">- Fix lazbuild failing to build programs if IDE is not installed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-1" date="1754222400">- Update to v4.2</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.2-2" date="1755345600">- Disable building the LCL for gtk and qt4 (not supported in EPEL10)</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.4-1" date="1767441600">- Update to v4.4</changelog>
  <changelog author="Artur Frenszek-Iwicki &lt;fedora@svgames.pl&gt; - 4.8-1" date="1784030400">- Update to v4.8</changelog>
</package>
<package pkgid="da532de3abb2e645c749c3499f409f80727ebfb79e4b4e4d4e2872024f74cd72" name="radsecproxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.11.3" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.1-1" date="1733486400">- Upgrade to 1.11.1 (#2330848)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-1" date="1742904000">- Upgrade to 1.11.2 (#2354876)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-4" date="1780574400">- Use 'systemctl try-reload-or-restart' in logrotate postrotate
  script (#2371326, thanks to Marcos Mello)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.2-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-6" date="1781784000">- Add upstream patch for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-7" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.3-1" date="1784289600">- Upgrade to 1.11.3 (#2499720)</changelog>
</package>
<package pkgid="f0f74c3b5ace6da30a507e58df8d5daeb4f289a4eb727352bc2ab24eec161b8e" name="radsecproxy-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.11.3" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.1-1" date="1733486400">- Upgrade to 1.11.1 (#2330848)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-1" date="1742904000">- Upgrade to 1.11.2 (#2354876)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-4" date="1780574400">- Use 'systemctl try-reload-or-restart' in logrotate postrotate
  script (#2371326, thanks to Marcos Mello)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.2-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-6" date="1781784000">- Add upstream patch for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-7" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.3-1" date="1784289600">- Upgrade to 1.11.3 (#2499720)</changelog>
</package>
<package pkgid="3f89585e08121089b2d17f3d494c0a6b9025e283f8bdca364ed1936c142c6186" name="restic-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.19.1" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="a952a323a70e27741b7c8c89b0a3d2f186d42acf11b16f23df3a4da77d7c08e5" name="restic-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.19.1" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="094167f09e3357aed470310c21e27bc9ba343891843ead01e2bf5b253bdeec2d" name="runc-debuginfo" arch="ppc64le">
  <version epoch="2" ver="1.5.1" rel="1.el10_3"/>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.3.4-1" date="1764417600">- Update to release v1.3.4
- Upstream fixes</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.4.0-1" date="1764936000">- Update to 1.4.0 upstream release
- Resolves: rhbz#2393586</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.4.0-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2:1.4.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.0-4" date="1773576000">- Update packit configuration
- Adds support for go_vendor_archive and go_vendor_license integration with
  packit</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.1-1" date="1773576001">- Update to release v1.4.1
- Resolves: rhbz#2447251
- Adopts go2rpm generates spec file
- New libpathrs build tag not included as that library is not yet available
  in Fedora</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.2-1" date="1775390400">- Update to release v1.4.2
- Resolves: rhbz#2447251
- Upstream fixes</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.4.3-1" date="1781352000">- Update to 1.4.3 upstream release
- Resolves: rhbz#2447251</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.5.0-1" date="1781870400">- Update to 1.5.0 upstream release
- Resolves: rhbz#2490756</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.5.1-1" date="1784030400">- Update to 1.5.1 upstream release
- Resolves: rhbz#2499881</changelog>
</package>
<package pkgid="c22401ff8a8173ec9871b882596a5d1de33ddffdfe6ed0c2dab4a58a2f7eaa7d" name="runc-debugsource" arch="ppc64le">
  <version epoch="2" ver="1.5.1" rel="1.el10_3"/>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.3.4-1" date="1764417600">- Update to release v1.3.4
- Upstream fixes</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.4.0-1" date="1764936000">- Update to 1.4.0 upstream release
- Resolves: rhbz#2393586</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.4.0-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2:1.4.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.0-4" date="1773576000">- Update packit configuration
- Adds support for go_vendor_archive and go_vendor_license integration with
  packit</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.1-1" date="1773576001">- Update to release v1.4.1
- Resolves: rhbz#2447251
- Adopts go2rpm generates spec file
- New libpathrs build tag not included as that library is not yet available
  in Fedora</changelog>
  <changelog author="Bradley G Smith &lt;bradley.g.smith@gmail.com&gt; - 2:1.4.2-1" date="1775390400">- Update to release v1.4.2
- Resolves: rhbz#2447251
- Upstream fixes</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.4.3-1" date="1781352000">- Update to 1.4.3 upstream release
- Resolves: rhbz#2447251</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.5.0-1" date="1781870400">- Update to 1.5.0 upstream release
- Resolves: rhbz#2490756</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2:1.5.1-1" date="1784030400">- Update to 1.5.1 upstream release
- Resolves: rhbz#2499881</changelog>
</package>
<package pkgid="d60a0d2e94aafc059169dfa9e8449a514685237d51031c3f9d964574c1865498" name="rust-cxxbridge-cmd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.0.197" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.194-1" date="1779105600">- Initial import (#2478032)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.197-1" date="1784030400">- Update to version 1.0.197; Fixes RHBZ#2497093</changelog>
</package>
<package pkgid="8affe7cf6a3994619628428fc25c90cac81d8b3a4b2a0b130ad3361e0b51943b" name="strawberry-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.2.24" rel="1.el10_3"/>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-2" date="1776513600">- Make appstream metadata valid on EPEL9</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.19-3" date="1778760000">- Rebuild (qt6)</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.2.19-4" date="1780401600">- Rebuild for kdesingleapplication 1.2</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 1.2.19-5" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.20-1" date="1782475200">- Update to version 1.2.20 (fedora#2491095)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.21-1" date="1782648000">- Update to version 1.2.21 (feedora#2493909)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.22-1" date="1783339200">- Update to version 1.2.22 (fedora#2497217)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.23-1" date="1783598400">- Update to version 1.2.23 (fedora#2498524)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.23-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.24-1" date="1784289601">- Update to version 1.2.24 (fedora#2501647)</changelog>
</package>
<package pkgid="850194f86ba8d8e62bdce22a5221636c164563e3efc93a0f3b11b552bb5735ce" name="strawberry-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.2.24" rel="1.el10_3"/>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.19-2" date="1776513600">- Make appstream metadata valid on EPEL9</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.2.19-3" date="1778760000">- Rebuild (qt6)</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.2.19-4" date="1780401600">- Rebuild for kdesingleapplication 1.2</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 1.2.19-5" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.20-1" date="1782475200">- Update to version 1.2.20 (fedora#2491095)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.21-1" date="1782648000">- Update to version 1.2.21 (feedora#2493909)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.22-1" date="1783339200">- Update to version 1.2.22 (fedora#2497217)</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.23-1" date="1783598400">- Update to version 1.2.23 (fedora#2498524)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.23-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnacek@gmail.com&gt; - 1.2.24-1" date="1784289601">- Update to version 1.2.24 (fedora#2501647)</changelog>
</package>
<package pkgid="5c436b3a3c98e3763822a32075bcc03a4aa0859d692be4fe3e036310fe8c9c47" name="tcpreplay-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.3" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 4.5.1-3" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.1-5" date="1737547200">- Drop unknown configure option --enable-tcpreplay-edit
- Change tcpdump dependency to package
- Remove checks for TX_RING support to avoid build problems</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-7" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.2-1" date="1756468800">- Update to 4.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.2-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.2-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.3-1" date="1784548800">- Update to 4.5.3</changelog>
</package>
<package pkgid="c72c8d7f28ce6f175614f647e8efd1bf062e1bc27e41c374d865b738fc0681b8" name="tcpreplay-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.5.3" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 4.5.1-3" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.1-5" date="1737547200">- Drop unknown configure option --enable-tcpreplay-edit
- Change tcpdump dependency to package
- Remove checks for TX_RING support to avoid build problems</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.1-7" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.2-1" date="1756468800">- Update to 4.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.2-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.2-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive com&gt; - 4.5.3-1" date="1784548800">- Update to 4.5.3</changelog>
</package>
<package pkgid="447e74c2ad93a74a7b67cb51079e4a98e1400bc2b423c8669d462a3f2ef9fea0" name="tomcat-native-debuginfo" arch="ppc64le">
  <version epoch="1" ver="2.0.15" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.0-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1:1.3.0-3" date="1721822400">- convert license to SPDX</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:1.3.0-3" date="1722340800">- Add buildrequires for openssl-devel-engine</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:1.3.0-3" date="1722340801">- Resolves: rhbz#2301332</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:1.3.0-9" date="1738238400">- Resolves: rhbz#2341450 - Fix non-existing java-home</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@fedoraproject.org&gt; - 1:2.0.12-1" date="1769774400">- Update to 2.0.12</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.14-1" date="1773230400">- Update to 2.0.14</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.14-2" date="1773921600">- The old description is from the 1.x era when tomcat-native provided broad
  APR integration. In 2.x it's focused solely on TLS/OpenSSL.</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.15-1" date="1784548800">- Update to 2.0.15</changelog>
</package>
<package pkgid="298bb318218dac118576798163fa58d99c66ff48e7fbd5fe1379210810312e12" name="tomcat-native-debugsource" arch="ppc64le">
  <version epoch="1" ver="2.0.15" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.0-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1:1.3.0-3" date="1721822400">- convert license to SPDX</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:1.3.0-3" date="1722340800">- Add buildrequires for openssl-devel-engine</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:1.3.0-3" date="1722340801">- Resolves: rhbz#2301332</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:1.3.0-9" date="1738238400">- Resolves: rhbz#2341450 - Fix non-existing java-home</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@fedoraproject.org&gt; - 1:2.0.12-1" date="1769774400">- Update to 2.0.12</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.14-1" date="1773230400">- Update to 2.0.14</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.14-2" date="1773921600">- The old description is from the 1.x era when tomcat-native provided broad
  APR integration. In 2.x it's focused solely on TLS/OpenSSL.</changelog>
  <changelog author="Dimitris Soumis &lt;dsoumis@redhat.com&gt; - 1:2.0.15-1" date="1784548800">- Update to 2.0.15</changelog>
</package>
<package pkgid="3631608b3dde4c6dbad6662113c50c09d6e4e849d8fb916ac04c97b2f9d25d85" name="vym-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-3" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-6" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.0.0-1" date="1783339200">- 3.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="ffe80db2abd1097b1c966853fae4b35e87449dd26695cf327bb1151a116f6f1c" name="vym-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-3" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.26-6" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.0.0-1" date="1783339200">- 3.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="b2c0dae054eafac2d6a0ab29e2ed52774fcc66abba92868088a53bc39c79d812" name="xeus-zmq-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.1.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 3.1.0-1" date="1727611200">- Update to latest release 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 3.1.0-4" date="1758456000">- Rebuild for xeus SONAME bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benson Muite &lt;fed500@fedorapeople.org&gt; - 3.1.1-1" date="1769342400">- Update to 3.1.1 rhbz#2396636</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.1-2" date="1781352000">- Rebuilt for openssl 4.0</changelog>
</package>
<package pkgid="4703351b3158e1b20f7c33a5b94d6e41f7e3f72328aea01be1493ee3a0e46abe" name="xeus-zmq-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.1.1" rel="2.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 3.1.0-1" date="1727611200">- Update to latest release 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 3.1.0-4" date="1758456000">- Rebuild for xeus SONAME bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-5" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benson Muite &lt;fed500@fedorapeople.org&gt; - 3.1.1-1" date="1769342400">- Update to 3.1.1 rhbz#2396636</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.1-2" date="1781352000">- Rebuilt for openssl 4.0</changelog>
</package>
<package pkgid="d4f9d05167b03bb278f53568ec7f56af28115d0ddf01fd8c8cfbfaf9ddcc3db1" name="xournalpp-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.6" rel="1.el10_3"/>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.2.10-1" date="1765108800">- Update to 1.2.10</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.2.10-2" date="1765886400">- Upload source</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.0-1" date="1765886401">- Update to 1.3.0</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.1-1" date="1766404800">- Update to 1.3.1 (rhbz#2424237)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.2-1" date="1770206400">- Update to 1.3.2 (rhbz#2436551)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.3-1" date="1772280000">- Update to 1.3.3 (rhbz#2443564)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.4-1" date="1774785600">- Update to 1.3.4 (rhbz#2452801)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.4-2" date="1774785601">- Update to 1.3.4 (rhbz#2452801)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.5-1" date="1781006400">- Update to 1.3.5 (#2486189)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.6-1" date="1784116800">- Update to upstream 1.3.6</changelog>
</package>
<package pkgid="992c3e26670d0c624cf06b5ac5416833294f8619f46306a269c0c92c36b94051" name="xournalpp-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.6" rel="1.el10_3"/>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.2.10-1" date="1765108800">- Update to 1.2.10</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.2.10-2" date="1765886400">- Upload source</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.0-1" date="1765886401">- Update to 1.3.0</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.1-1" date="1766404800">- Update to 1.3.1 (rhbz#2424237)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.2-1" date="1770206400">- Update to 1.3.2 (rhbz#2436551)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.3-1" date="1772280000">- Update to 1.3.3 (rhbz#2443564)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.4-1" date="1774785600">- Update to 1.3.4 (rhbz#2452801)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.4-2" date="1774785601">- Update to 1.3.4 (rhbz#2452801)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.5-1" date="1781006400">- Update to 1.3.5 (#2486189)</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1.3.6-1" date="1784116800">- Update to upstream 1.3.6</changelog>
</package>
<package pkgid="7dad4e2e55e19989e6c27dab41fb5db718f2c76df1a1210205b0d9eb8dbe9742" name="xrootd-s3-http-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.9" rel="1.el10_3"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
<package pkgid="0796a03bc351a57f9c7f8ca3adf8f99fb2f25d009695b92ede7c344188603f77" name="xrootd-s3-http-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.6.9" rel="1.el10_3"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
</otherdata>