<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="71">
<package pkgid="fb1ee38123276ac26e4b6841627a26ec288b5c3975c66088b8fe88b33f625381" name="3proxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="1.el10_3"/>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.7-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.0.0-1" date="1787400000">- Update to 1.0.0</changelog>
</package>
<package pkgid="7acf0ca8f2b9d87f3dcacf2258ae7d3fe2cc9e02e231ff75828293c3a7408251" name="3proxy-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="1.el10_3"/>
  <changelog author="Tim Semeijn &lt;tim@semeijn.net&gt; - 0.9.5-1" date="1742558400">- Update to 0.9.5 (fixes rhbz#2351065)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.5-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.9.5-5" date="1773489600">- Modernized spec file for rawhide/epel10 - Removed redundant %%global
  _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
  %%make_build for better compliance - Updated %%install to use more
  idiomatic install commands - Listed binaries explicitly in %%files to
  avoid warnings - Improved man page globs to be compression-neutral -
  Ensured correct directory ownership for logs</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.6-1" date="1776427200">- Update to 0.9.6 (fixes rhbz#2457569)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.9.6-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Tim Semeijn &lt;fedora@semops.nl&gt; - 0.9.7-1" date="1783598400">- Update to 0.9.7 (fixes rhbz#2497044)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.7-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.0.0-1" date="1787400000">- Update to 1.0.0</changelog>
</package>
<package pkgid="33611da6e2d0b08a5df3e7315d1e2b8c838876ad41320cec8ab1b94991e7ae47" name="b3sum-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.7" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-1" date="1745236800">- Update to version 1.8.2; Fixes RHBZ#2361298</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-3" date="1761393600">- Allow duct 1.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.3-1" date="1767960000">- Update to version 1.8.3; Fixes RHBZ#2428096</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.4-1" date="1774958400">- Update to version 1.8.4; Fixes RHBZ#2453125</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.5-1" date="1777291200">- Update to version 1.8.5; Fixes RHBZ#2461747</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.5-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1786017600">- Update to version 1.8.6; Fixes RHBZ#2511862</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.7-1" date="1787572800">- Update to version 1.8.7; Fixes RHBZ#2520162</changelog>
</package>
<package pkgid="588dfe29dec6b3220a06f2e88d97d00f4e56c84b9111a26b49556443c5cbd57e" name="betterleaks-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
</package>
<package pkgid="8db440024191cf3e86bc494b0feb0f3712ee8796b9234ff4ba7e4c2d42be3d01" name="betterleaks-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
</package>
<package pkgid="e18607fdd0ee805580710348ce22658ff6a6726916cf8fbe4ef692217dc9986e" name="bluechi-agent-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="d0f475195fb49ac6592e9e2b819d74e711542c6a2790f23649824eeee0acfde7" name="bluechi-controller-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="2fc808798a84bedda3fa33ab15056730e538de3bb86a3ff697c3ad36a1c46475" name="bluechi-ctl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="925c7bb17019156db0048e6f6fec69ebf9ed14db54bbcb52830d59a3f6113c52" name="bluechi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="fa71e95c9a6cb9b85326e4af0a0b3ea4133e65b65172ab7ab9d6cac8d2853188" name="bluechi-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="661160398768a3725b4a7a7d6135c6c7795c7b1c29c86d510128932eb11ebd6e" name="bluechi-is-online-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_3"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="6b55550de3cddf7aebad12ae106f0bef3cf4a272e66ae342ce2a8e5f0e7e4c33" name="c-icap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="6b00e801b2a7f22dce18f0e33006d9e074dfba4e6831913941cfd624b67d3bd7" name="c-icap-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="9ed03d513066209e7e51814869d37df6a60a5a410be2672590ba2702fc1850bc" name="c-icap-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_3"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="acc29ab942300617d58274e0a8f85807713d25a0793c598679573768730332ff" name="cargo-c-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.10.24" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.19-1" date="1771243200">- Update to version 0.10.19+cargo-0.93.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.10.19-2" date="1774180800">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-1" date="1779969600">- Update to version 0.10.20+cargo-0.94.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-2" date="1779969601">- Partially restore debuginfo on i686 to fix debuginfo package build</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.21-1" date="1780660800">- Update to version 0.10.21+cargo-0.95.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.10.21-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.21-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.22-1" date="1786363200">- Update to version 0.10.22+cargo-0.96.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.23-1" date="1787054400">- Update to version 0.10.23+cargo-0.97.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.24-1" date="1787054401">- Update to version 0.10.24+cargo-0.98.0; Fixes RHBZ#2366918</changelog>
</package>
<package pkgid="cb2683470245d9430030c200fbab3b472c8d0360b51f440b2bce97ee97d179fc" name="chromium-common-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="fe4fb1922858082e34e801bf4e1c8890f38b7a0a0c03589b648a783358091e2b" name="chromium-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="511824a752e3e03fe92859d4e3649868a300906e6e2e1b89cff41e190502203e" name="chromium-headless-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="9dcbdadb88b86fddf9508b52ff6520027f3ffcaa8e81e3251f815bcc21b97aac" name="chromium-qt5-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="146f85c5ff217f6043955880970a95e608a51df391e444e69af15f48e63bb733" name="chromium-qt6-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_3"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="faa82e22df20737b842ff858f1631f52c8adb475c53726d7de91005f0244e8c1" name="clamav-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="66a291de6049290231ac3473190a6e0feab99775b3eb3cb4573b12d2bcead2f8" name="clamav-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="dbb96a0411ba4760998542d752b78cdc83fe3c2f90603591236e4a14425be042" name="clamav-freshclam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="d9a92b9c8536097eb40590ecae175196974e8dc6a8149b0f1aa411476f81d25e" name="clamav-lib-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="3f5eadca56037049806300d2d42c98214a38ae7e68f30273be4ff7b6cb5edb16" name="clamav-milter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="fffff41835864555b3075ec960176fb8c00a6490357a84b3a90364fc19943370" name="clamd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_3"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="e32e360c75f074e453f1feafb8b892db31e2d83746d9ca37e0b0bcdf7bae5738" name="clash-meta-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.19.30" rel="1.el10_3"/>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.20-1" date="1772193600">- Introduce clash-meta to EPEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.22-1" date="1775217600">- Update to 1.19.22 upstream release</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.24-1" date="1776686400">- Update to 1.19.24 upstream release
- Resolves: rhbz#2456356</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.25-1" date="1778932800">- Update to 1.19.25 upstream release
- Resolves: rhbz#2478200</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-2" date="1787054400">- Update license detection</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-3" date="1787054401">- Update license</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.30-1" date="1787054402">- Update to 1.19.30 upstream release
- Resolves: rhbz#2517234</changelog>
</package>
<package pkgid="2c69cef28f16fbb67b91d1e65c7e6f1d704540de275544e70f3cd65e9ff1ebec" name="clash-meta-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.19.30" rel="1.el10_3"/>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.20-1" date="1772193600">- Introduce clash-meta to EPEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.22-1" date="1775217600">- Update to 1.19.22 upstream release</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.24-1" date="1776686400">- Update to 1.19.24 upstream release
- Resolves: rhbz#2456356</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.25-1" date="1778932800">- Update to 1.19.25 upstream release
- Resolves: rhbz#2478200</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-2" date="1787054400">- Update license detection</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 1.19.25-3" date="1787054401">- Update license</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.19.30-1" date="1787054402">- Update to 1.19.30 upstream release
- Resolves: rhbz#2517234</changelog>
</package>
<package pkgid="d329ad450c16cab24ded6bcd0c45872ad83331c27e5799fc8b0e58801c3e16e0" name="gn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="5b1aaba655474e5ce6e8bf6b16fdf8be0b253a6eb9d9272051dae1fc3009c26c" name="gn-debugsource" arch="ppc64le">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="63bff3ac5d4170a834f8625ff106ee95ebe8ed3683b1a878907a39e79968ca0d" name="haveged-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="82190a2bd2c2eef90ba461416f5cc60c228ae164bb16161c9a31ac10f43a72b6" name="haveged-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.9.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="bdeb69b9e88e9a5cf5522cfbaa5e2f4e3c8e26709873d961b408e5e7d5927dc8" name="jigdo-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="9.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="bfa2908b1a140b6b7103055eb00af4efba9f33a80588cc4127f8d1761047cc2c" name="jigdo-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="9.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="cd25977961a03f66de5b389adad35c1d53a61f28381f4a304a0e00e8d8c3aef7" name="libdeflate-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="ee5aed9abf001a65c75ecba8a7c5eb90add889d9242e5e7f94f48bdc4ddf98e5" name="libdeflate-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="d4a94f427ebfe16ffb779561dce1684b2249e5b189669d712536c8c37fb4b675" name="libdeflate-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="8a26dc15e56bc5193622c993d42fb9bc4b7411c54d09b84c08c7a34b91a85819" name="log4cxx-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.8.0-1" date="1787227200">- Update to 1.8.0</changelog>
</package>
<package pkgid="fd09ebfadec86c54fbce34810b5978de6baa8a02d06f7ce8ce03f95154d8de14" name="log4cxx-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="1.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.3.1-1" date="1735214400">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.4.0-1" date="1740830400">- Update to 1.4.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.5.0-1" date="1759492800">- Update to 1.5.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-1" date="1783080000">- Update to 1.7.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-2" date="1783080001">- Skip 2GB-message test on 32-bit architectures</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.7.0-3" date="1783080002">- Drop KEYS from %doc, no longer shipped upstream since 1.6.1</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 1.8.0-1" date="1787227200">- Update to 1.8.0</changelog>
</package>
<package pkgid="13ff785260a2f77a3023d3fc4392b44930db5756ce4944099fdf44e5d1a25c00" name="mingw32-libdeflate-debuginfo" arch="noarch">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="139087c44554cefec6d3a7545300f4e314b1199ee4ef842c9e7ec73efd4d77e1" name="mingw64-libdeflate-debuginfo" arch="noarch">
  <version epoch="0" ver="1.26" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.23-3" date="1747051200">- Use newer, less-confusing bcond style</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.24-1" date="1747051201">- Update to 1.24 (close RHBZ#2365577)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-1" date="1761998400">- new upstream 1.25</changelog>
  <changelog author="Nick Black &lt;dankamongmen@gmail.com&gt; - 1.25-2" date="1761998401">- new upstream 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.25-4" date="1781524800">- In F45+/EL11+, don’t build programs, only libraries, on MinGW
- Works around and closes RHBZ#2481005</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.26-1" date="1787486400">- Update to 1.26 (close RHBZ#2521544)</changelog>
</package>
<package pkgid="b2addbb811995ffcb0f5e430d9204544c8f095667d1874f2103be71c0a6234c8" name="openbao-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="c11cb2914bb0fb948942f5b51f5ad5f8bf549c2f33df6017528b7ddc5be4bde6" name="openbao-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="1.el10_3"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="17adbf3fd05afa752998e841b32e74d691458e0bd316d58beb3b100f7583bb8d" name="opkssh-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="2.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="b2264967c81c2b482954080e4edc23b30e22518d10f00e9d7d50170d4464bffd" name="opkssh-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="2.el10_3"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="7461db4f2566f949b7e21913f6495d776463bce5d6238fbae47a50bcab93115e" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="e495509bccc221a701ebf4ba33184196b97d60ea591e2541e02e837e42dfb1ff" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="33f85d1538d1124846e30e2427b3b8f350598cf6bdfc12797106e3f7797c651b" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="71e485697210646bd48be79005c0c9725bb12f7354886c8c6b3a2b17afe6438f" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="986d0af0175bdf43386b33d0440e9ed9eb3adfa032a0d0399c9909d9d2188875" name="proftpd-postgresql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="2082af48f29b36637d42efc13c50fba85aa072b98b6470df9748505e3a80c471" name="proftpd-proxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="d435d9d6eda5bb42634837ae749924e24c442511310accc24b0b714d9ca66271" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="48cc6c19250f005f3b77037e0e65a76568b627720ab907771e784a9f110db9ec" name="proftpd-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="1cfced65b136119c2b63b7822262b781ce7b37e9fb606a6ff16d746469283b5f" name="pyscard-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="bde6a88296a5c74ec3521e3b82235bf7e643bc460096808c3adfa63e6d0b7f50" name="python-cramjam-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.12.0" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-1" date="1744545600">- Update to 2.10.0 (close RHBZ#2359237)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-2" date="1746446400">- Report and skip test that fails with miniz_oxide&gt;0.8.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-3" date="1746446401">- Bump release to avoid downgrading the EPEL10.0 package</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-4" date="1767787200">- Drop EPEL10-specific conditionals since the branch is diverged</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-5" date="1767787201">- No longer run tests in parallel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-1" date="1767787202">- Update to 2.11.0 (close RHBZ#2383690)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-6" date="1781956800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-7" date="1781956801">- Port to PyO3 0.28
- Update `License` expression</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-8" date="1782734400">- Update to PyO3 0.29</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.12.0-1" date="1787400000">- Update to 2.12.0 (close RHBZ#2457848)</changelog>
</package>
<package pkgid="69c2dc90bc18589dd66aa3bbfb79125aae0dece0adbe7844eda18dec47f55777" name="python-zmq-debugsource" arch="ppc64le">
  <version epoch="0" ver="27.2.0" rel="1.el10_3"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.0-1" date="1749902400">- Update to 27.0.0 upstream release
- Resolves: rhbz#2372701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.1-1" date="1754222400">- Update to 27.0.1 upstream release
- Resolves: rhbz#2386160</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.2-1" date="1755777600">- Update to 27.0.2 upstream release
- Resolves: rhbz#2390015</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.1.0-1" date="1757419200">- Update to 27.1.0 upstream release
- Resolves: rhbz#2393979</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-2" date="1787400000">- Update scikit-build-core configuration</changelog>
  <changelog author="Marcin Juszkiewicz &lt;mjuszkiewicz@redhat.com&gt; - 27.1.0-4" date="1787400001">- disable green/gevent tests on riscv64</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-5" date="1787400002">- Drop conditionals for Fedora 42, soon reaching end of life</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-7" date="1787400003">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-8" date="1787400004">- Fix TestFrame.test_buffer_numpy on numpy 2.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.2.0-1" date="1787400005">- Update to 27.2.0 upstream release
- Resolves: rhbz#2520725</changelog>
</package>
<package pkgid="26b8195ac058ef7b2ede4b34eee586cd967ff58653b5586f71e7f6609a72f81f" name="python3-cramjam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.12.0" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-1" date="1744545600">- Update to 2.10.0 (close RHBZ#2359237)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-2" date="1746446400">- Report and skip test that fails with miniz_oxide&gt;0.8.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-3" date="1746446401">- Bump release to avoid downgrading the EPEL10.0 package</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-4" date="1767787200">- Drop EPEL10-specific conditionals since the branch is diverged</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.10.0-5" date="1767787201">- No longer run tests in parallel</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-1" date="1767787202">- Update to 2.11.0 (close RHBZ#2383690)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-6" date="1781956800">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-7" date="1781956801">- Port to PyO3 0.28
- Update `License` expression</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.11.0-8" date="1782734400">- Update to PyO3 0.29</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2.12.0-1" date="1787400000">- Update to 2.12.0 (close RHBZ#2457848)</changelog>
</package>
<package pkgid="917ca07ce7c4e7789328fb8eec96fd41c9d1808eb00d1e567d54731557e6f901" name="python3-pyscard-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="564ac3916ae8db886b9fbbf9ad1ed1ae13d9bf72e06d3db5ec1c41da2913382c" name="python3-pyzmq-debuginfo" arch="ppc64le">
  <version epoch="0" ver="27.2.0" rel="1.el10_3"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.0-1" date="1749902400">- Update to 27.0.0 upstream release
- Resolves: rhbz#2372701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.1-1" date="1754222400">- Update to 27.0.1 upstream release
- Resolves: rhbz#2386160</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.0.2-1" date="1755777600">- Update to 27.0.2 upstream release
- Resolves: rhbz#2390015</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 27.1.0-1" date="1757419200">- Update to 27.1.0 upstream release
- Resolves: rhbz#2393979</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-2" date="1787400000">- Update scikit-build-core configuration</changelog>
  <changelog author="Marcin Juszkiewicz &lt;mjuszkiewicz@redhat.com&gt; - 27.1.0-4" date="1787400001">- disable green/gevent tests on riscv64</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-5" date="1787400002">- Drop conditionals for Fedora 42, soon reaching end of life</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-7" date="1787400003">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.1.0-8" date="1787400004">- Fix TestFrame.test_buffer_numpy on numpy 2.5</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 27.2.0-1" date="1787400005">- Update to 27.2.0 upstream release
- Resolves: rhbz#2520725</changelog>
</package>
<package pkgid="e041c18b8b58dcb2b4d45de916761278690d4a9ae217a5792dff9ae50f571910" name="rdiff-backup-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.2.6" rel="17.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="581f8c4346d0344870034d9f2c1f38b031a4aab0fd74c87d897540dc422d5f86" name="rdiff-backup-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.2.6" rel="17.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="00b9febb1899be9eb43d115da27ba969cb402ef07caae1e1baca6a0f6c913a34" name="rpki-client-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.9" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="6d7f6959e524aed79777786def2bb24d2b2bed8ea8373effc61ef3e8021b4e12" name="rpki-client-debugsource" arch="ppc64le">
  <version epoch="0" ver="9.9" rel="1.el10_3"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="15707341662a284331dbfbf52e4e6d457888b3474a1d8271f0550b954054a869" name="rust-b3sum-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.7" rel="1.el10_3"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-1" date="1745236800">- Update to version 1.8.2; Fixes RHBZ#2361298</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.2-3" date="1761393600">- Allow duct 1.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.3-1" date="1767960000">- Update to version 1.8.3; Fixes RHBZ#2428096</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.4-1" date="1774958400">- Update to version 1.8.4; Fixes RHBZ#2453125</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.5-1" date="1777291200">- Update to version 1.8.5; Fixes RHBZ#2461747</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.5-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.6-1" date="1786017600">- Update to version 1.8.6; Fixes RHBZ#2511862</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.8.7-1" date="1787572800">- Update to version 1.8.7; Fixes RHBZ#2520162</changelog>
</package>
<package pkgid="9272a9eb3efd76d519b9347bffa4909062dc28ea92027c751b05f93fcbff8d92" name="rust-cargo-c-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.10.24" rel="1.el10_3"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.19-1" date="1771243200">- Update to version 0.10.19+cargo-0.93.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.10.19-2" date="1774180800">- Rebuilt with rust-tar 0.4.45 for CVE-2026-33056</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-1" date="1779969600">- Update to version 0.10.20+cargo-0.94.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.20-2" date="1779969601">- Partially restore debuginfo on i686 to fix debuginfo package build</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.21-1" date="1780660800">- Update to version 0.10.21+cargo-0.95.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.10.21-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.21-3" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.22-1" date="1786363200">- Update to version 0.10.22+cargo-0.96.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.23-1" date="1787054400">- Update to version 0.10.23+cargo-0.97.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.10.24-1" date="1787054401">- Update to version 0.10.24+cargo-0.98.0; Fixes RHBZ#2366918</changelog>
</package>
<package pkgid="6180005d3f8a1f36cbcce29875901ef794a5f68cd2a233ddfbde344a90fb749c" name="sympa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.80" rel="1.el10_3"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="7f6afade7184b08f59facb6d74426bcf1b2c4965d5ffe28f17305994e99d8bc4" name="sympa-debugsource" arch="ppc64le">
  <version epoch="0" ver="6.2.80" rel="1.el10_3"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="8f2961d9142c85059573e776e76ec24273af216cd5153dac3e02bca06a01f358" name="tcltls-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="2.el10_3"/>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-16" date="1736942400">- Fix building against TCL 9.0
- Fixes #2337790</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-17" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.22-18" date="1738584000">- Rebuilt for tcl/tk</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-19" date="1746619200">- Fix loading on tls 9.0 (fixes #2361443)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-20" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-21" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.22-22" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-23" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-1" date="1784635200">- update to 2.0.1</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-2" date="1785153600">- Fix License to TCL</changelog>
</package>
<package pkgid="f8d152c966722579f0f4944f9c65fc76c75bd1a73c4f8b976476b3ddcb359ed2" name="tcltls-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="2.el10_3"/>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-16" date="1736942400">- Fix building against TCL 9.0
- Fixes #2337790</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-17" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.22-18" date="1738584000">- Rebuilt for tcl/tk</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.7.22-19" date="1746619200">- Fix loading on tls 9.0 (fixes #2361443)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-20" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-21" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.22-22" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.22-23" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-1" date="1784635200">- update to 2.0.1</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.1-2" date="1785153600">- Fix License to TCL</changelog>
</package>
<package pkgid="da0ffc72a924b7292dd6e58c4378e2fd347935f431dd44ffc47f86bfa572da96" name="tin-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.6" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
<package pkgid="192ba88bdb9ff21eb68eef7cd55c5e76569d8a431794801672fd3ea0a39649d3" name="tin-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.6" rel="1.el10_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
</otherdata>