# changelog

author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Than Ngo <than@redhat.com> - 148.0.7778.178-1
changelog:
  - Update to 148.0.7778.178
    * CVE-2026-9111: Use after free in WebRTC
    * CVE-2026-9110: Inappropriate implementation in UI
    * CVE-2026-9112: Use after free in GPU
    * CVE-2026-9113: Out of bounds read in GPU
    * CVE-2026-9114: Use after free in QUIC
    * CVE-2026-9115: Insufficient policy enforcement in Service Worker
    * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-9117: Type Confusion in GFX
    * CVE-2026-9118: Use after free in XR
    * CVE-2026-9119: Heap buffer overflow in WebRTC
    * CVE-2026-9120: Use after free in WebRTC
    * CVE-2026-9126: Use after free in DOM
    * CVE-2026-9121: Out of bounds read in GPU
    * CVE-2026-9122: Out of bounds read in GPU
    * CVE-2026-9123: Heap buffer overflow in Chromecast
    * CVE-2026-9124: Insufficient validation of untrusted input in Input
  - Backport upstream patches to improve auto dark image inversion logic
  - Update default chromium browser config


author: Than Ngo <than@redhat.com> - 148.0.7778.215-1
changelog:
  - Update to 148.0.7778.215
    * CVE-2026-9872: Out of bounds write in GPU
    * CVE-2026-9873: Use after free in Network
    * CVE-2026-9874: Use after free in Dawn
    * CVE-2026-9875: Out of bounds read in WebGL
    * CVE-2026-9876: Use after free in WebGL
    * CVE-2026-9877: Use after free in ANGLE
    * CVE-2026-9878: Use after free in ANGLE
    * CVE-2026-9879: Out of bounds write in ANGLE
    * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    * CVE-2026-9881: Use after free in Bluetooth
    * CVE-2026-9882: Integer overflow in ANGLE
    * CVE-2026-9883: Use after free in Base
    * CVE-2026-9884: Use after free in Browser
    * CVE-2026-9885: Insufficient validation of untrusted input in UI
    * CVE-2026-9886: Use after free in Base
    * CVE-2026-9887: Use after free in Proxy
    * CVE-2026-9888: Use after free in WebView
    * CVE-2026-9889: Out of bounds read and write in Dawn
    * CVE-2026-9890: Use after free in XR
    * CVE-2026-9891: Use after free in Extensions
    * CVE-2026-9892: Inappropriate implementation in Skia
    * CVE-2026-9893: Use after free in Skia
    * CVE-2026-9894: Use after free in GPU
    * CVE-2026-9895: Out of bounds read in GPU
    * CVE-2026-9896: Out of bounds write in V8
    * CVE-2026-9897: Use after free in DOM
    * CVE-2026-9898: Insufficient validation of untrusted input in GPU
    * CVE-2026-9899: Use after free in ANGLE
    * CVE-2026-9900: Out of bounds write in ANGLE
    * CVE-2026-9901: Use after free in ANGLE
    * CVE-2026-9902: Use after free in Accessibility
    * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    * CVE-2026-9904: Use after free in ANGLE
    * CVE-2026-9905: Use after free in Accessibility
    * CVE-2026-9906: Out of bounds write in GPU
    * CVE-2026-9907: Out of bounds read in Dawn
    * CVE-2026-9908: Out of bounds read in ANGLE
    * CVE-2026-9909: Integer overflow in Skia
    * CVE-2026-9910: Out of bounds memory access in ANGLE
    * CVE-2026-9911: Integer overflow in ANGLE
    * CVE-2026-9912: Inappropriate implementation in GPU
    * CVE-2026-9913: Inappropriate implementation in ANGLE
    * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9915: Heap buffer overflow in ANGLE
    * CVE-2026-9916: Out of bounds write in ANGLE
    * CVE-2026-9917: Uninitialized Use in WebGL
    * CVE-2026-9918: Inappropriate implementation in Tint
    * CVE-2026-9919: Out of bounds read in WebGL
    * CVE-2026-9920: Uninitialized Use in GPU
    * CVE-2026-9921: Uninitialized Use in WebGL
    * CVE-2026-9922: Use after free in GPU
    * CVE-2026-9923: Use after free in Skia
    * CVE-2026-9924: Heap buffer overflow in ANGLE
    * CVE-2026-9925: Use after free in ANGLE
    * CVE-2026-9926: Heap buffer overflow in ANGLE
    * CVE-2026-9927: Use after free in ANGLE
    * CVE-2026-9928: Out of bounds read in ANGLE
    * CVE-2026-9929: Inappropriate implementation in WebGL
    * CVE-2026-9930: Out of bounds write in Dawn
    * CVE-2026-9931: Use after free in GPU
    * CVE-2026-9932: Use after free in ANGLE
    * CVE-2026-9933: Use after free in Input
    * CVE-2026-9934: Use after free in Aura
    * CVE-2026-9935: Uninitialized Use in ANGLE
    * CVE-2026-9936: Use after free in GFX
    * CVE-2026-9937: Use after free in UI
    * CVE-2026-9938: Inappropriate implementation in V8
    * CVE-2026-9939: Heap buffer overflow in WebCodecs
    * CVE-2026-9940: Heap buffer overflow in ANGLE
    * CVE-2026-9941: Use after free in ANGLE
    * CVE-2026-9942: Uninitialized Use in ANGLE
    * CVE-2026-9943: Out of bounds read in WebGL
    * CVE-2026-9944: Uninitialized Use in ANGLE
    * CVE-2026-9945: Use after free in Media
    * CVE-2026-9946: Use after free in ANGLE
    * CVE-2026-9947: Use after free in XML
    * CVE-2026-9948: Use after free in Views
    * CVE-2026-9949: Use after free in Core
    * CVE-2026-9950: Insufficient validation of untrusted input in iOS
    * CVE-2026-9951: Use after free in UI
    * CVE-2026-9952: Use after free in WebAudio
    * CVE-2026-9953: Out of bounds read in ANGLE
    * CVE-2026-9954: Use after free in TabStrip
    * CVE-2026-9955: Inappropriate implementation in iOS
    * CVE-2026-9956: Use after free in iOS
    * CVE-2026-9957: Use after free in PDF
    * CVE-2026-9958: Use after free in PDFium
    * CVE-2026-9959: Race in WebRTC
    * CVE-2026-9960: Integer overflow in PDFium
    * CVE-2026-9961: Use after free in SurfaceCapture
    * CVE-2026-9962: Use after free in WebRTC
    * CVE-2026-9963: Uninitialized Use in iOS
    * CVE-2026-9964: Use after free in Bluetooth
    * CVE-2026-9965: Out of bounds write in ANGLE
    * CVE-2026-9966: Integer overflow in XML
    * CVE-2026-9967: Out of bounds write in GPU
    * CVE-2026-9968: Integer overflow in V8
    * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9970: Use after free in WebGL
    * CVE-2026-9971: Inappropriate implementation in iOS
    * CVE-2026-9972: Uninitialized Use in Gamepad
    * CVE-2026-9973: Out of bounds write in V8
    * CVE-2026-9974: Out of bounds write in GPU
    * CVE-2026-9975: Out of bounds read and write in ANGLE
    * CVE-2026-9976: Inappropriate implementation in USB
    * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    * CVE-2026-9978: Use after free in Glic
    * CVE-2026-9979: Insufficient validation of untrusted input in Input
    * CVE-2026-9980: Insufficient validation of untrusted input in Printing
    * CVE-2026-9981: Inappropriate implementation in Skia
    * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9983: Type Confusion in Skia
    * CVE-2026-9984: Use after free in UI
    * CVE-2026-9985: Insufficient validation of untrusted input in Media
    * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-9988: Use after free in WebRTC
    * CVE-2026-9989: Inappropriate implementation in Media
    * CVE-2026-9990: Use after free in WebAppInstalls
    * CVE-2026-9991: Inappropriate implementation in Media
    * CVE-2026-9992: Use after free in Network
    * CVE-2026-9993: Use after free in Views
    * CVE-2026-9994: Use after free in Core
    * CVE-2026-9995: Use after free in WebXR
    * CVE-2026-9996: Out of bounds read in WebRTC
    * CVE-2026-9997: Use after free in Input
    * CVE-2026-9998: Integer overflow in Skia
    * CVE-2026-9999: Inappropriate implementation in ANGLE
    * CVE-2026-10000: Use after free in Passwords
    * CVE-2026-10001: Use after free in PerformanceManager
    * CVE-2026-10002: Use after free in PDFium
    * CVE-2026-10003: Use after free in Views
    * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    * CVE-2026-10005: Use after free in WebAppInstalls
    * CVE-2026-10006: Race in WebAudio
    * CVE-2026-10007: Use after free in SVG
    * CVE-2026-10008: Uninitialized Use in GPU
    * CVE-2026-10009: Integer overflow in Skia
    * CVE-2026-10010: Inappropriate implementation in Input
    * CVE-2026-10011: Inappropriate implementation in Skia
    * CVE-2026-10012: Use after free in Skia
    * CVE-2026-10013: Use after free in WebCodecs
    * CVE-2026-10014: Use after free in WebMIDI
    * CVE-2026-10015: Integer overflow in WTF
    * CVE-2026-10016: Use after free in DOM
    * CVE-2026-10017: Out of bounds read in Headless
    * CVE-2026-10018: Integer overflow in ANGLE
    * CVE-2026-10019: Integer overflow in ANGLE
    * CVE-2026-10020: Insufficient validation of untrusted input in Skia
    * CVE-2026-10021: Insufficient validation of untrusted input in USB
    * CVE-2026-10022: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 149.0.7827.53-1
changelog:
  - Update to 149.0.7827.53
    * CVE-2026-10881: Out of bounds read and write in ANGLE
    * CVE-2026-10882: Use after free in Network
    * CVE-2026-10883: Out of bounds write in ANGLE
    * CVE-2026-10884: Use after free in Chromecast
    * CVE-2026-10885: Use after free in Chrome for iOS
    * CVE-2026-10886: Use after free in FileSystem
    * CVE-2026-10887: Use after free in Chromoting
    * CVE-2026-10888: Use after free in Cast Streaming
    * CVE-2026-10889: Out of bounds read in ANGLE
    * CVE-2026-10890: Use after free in Cast
    * CVE-2026-10891: Use after free in GFX
    * CVE-2026-10892: Out of bounds write in GPU
    * CVE-2026-10893: Use after free in Chromoting
    * CVE-2026-10894: Use after free in Printing
    * CVE-2026-10895: Use after free in Ozone
    * CVE-2026-10896: Use after free in Chrome for iOS
    * CVE-2026-10897: Out of bounds write in GPU
    * CVE-2026-10898: Stack buffer overflow in GPU
    * CVE-2026-10899: Use after free in Ozone
    * CVE-2026-10900: Use after free in Passwords
    * CVE-2026-10901: Use after free in Passwords
    * CVE-2026-10902: Use after free in Ozone
    * CVE-2026-10903: Use after free in WebRTC
    * CVE-2026-10904: Inappropriate implementation in V8
    * CVE-2026-10905: Use after free in Network
    * CVE-2026-10906: Use after free in WebAuthentication
    * CVE-2026-10907: Out of bounds write in ANGLE
    * CVE-2026-10908: Use after free in FullScreen
    * CVE-2026-10909: Use after free in Dawn
    * CVE-2026-10910: Type Confusion in V8
    * CVE-2026-10911: Insufficient validation of untrusted input in Media
    * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10913: Use after free in ANGLE
    * CVE-2026-10914: Use after free in ANGLE
    * CVE-2026-10915: Use after free in Core
    * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10917: Insufficient validation of untrusted input in Media
    * CVE-2026-10918: Use after free in Viz
    * CVE-2026-10919: Use after free in ANGLE
    * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
    * CVE-2026-10921: Integer overflow in Dawn
    * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10923: Use after free in WebAppInstalls
    * CVE-2026-10924: Integer overflow in Chromecast
    * CVE-2026-10925: Out of bounds write in Skia
    * CVE-2026-10926: Use after free in Cast
    * CVE-2026-10927: Out of bounds read in Dawn
    * CVE-2026-10928: Script injection in Headless
    * CVE-2026-10929: Heap buffer overflow in ANGLE
    * CVE-2026-10930: Out of bounds read in ANGLE
    * CVE-2026-10931: Use after free in FileSystem
    * CVE-2026-10932: Use after free in UI
    * CVE-2026-10933: Use after free in Audio
    * CVE-2026-10934: Use after free in Autofill
    * CVE-2026-10935: Inappropriate implementation in V8
    * CVE-2026-10936: Type Confusion in V8
    * CVE-2026-10937: Inappropriate implementation in Passwords
    * CVE-2026-10938: Insufficient validation of untrusted input in Input
    * CVE-2026-10939: Use after free in WebRTC
    * CVE-2026-10940: Race in Codecs
    * CVE-2026-10941: Out of bounds memory access in Skia
    * CVE-2026-10942: Insufficient validation of untrusted input in UI
    * CVE-2026-10943: Use after free in WebRTC
    * CVE-2026-10944: Insufficient policy enforcement in Autofill
    * CVE-2026-10945: Use after free in PDF
    * CVE-2026-10946: Heap buffer overflow in Media
    * CVE-2026-10947: Use after free in WebRTC
    * CVE-2026-10948: Use after free in WebRTC
    * CVE-2026-10949: Heap buffer overflow in Video
    * CVE-2026-10950: Insufficient policy enforcement in Autofill
    * CVE-2026-10951: Use after free in Autofill
    * CVE-2026-10952: Use after free in Chrome for iOS
    * CVE-2026-10953: Use after free in Core
    * CVE-2026-10954: Use after free in Actor
    * CVE-2026-10955: Type Confusion in ANGLE
    * CVE-2026-10956: Use after free in MimeHandlerView
    * CVE-2026-10957: Use after free in Glic
    * CVE-2026-10958: Use after free in Chrome for iOS
    * CVE-2026-10959: Use after free in Input
    * CVE-2026-10960: Uninitialized Use in Codecs
    * CVE-2026-10961: Use after free in Chrome for iOS
    * CVE-2026-10962: Type Confusion in Media
    * CVE-2026-10963: Integer overflow in V8
    * CVE-2026-10964: Integer overflow in V8
    * CVE-2026-10965: Integer overflow in DevTools
    * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10967: Use after free in SurfaceCapture
    * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
    * CVE-2026-10971: Insufficient validation of untrusted input in Printing
    * CVE-2026-10972: Use after free in Ozone
    * CVE-2026-10973: Uninitialized Use in Dawn
    * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-10975: Use after free in WebRTC
    * CVE-2026-10976: Uninitialized Use in Dawn
    * CVE-2026-10977: Uninitialized Use in Skia
    * CVE-2026-10978: Use after free in Chromoting
    * CVE-2026-10979: Out of bounds read in ANGLE
    * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10982: Use after free in WebXR
    * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10984: Inappropriate implementation in Accessibility
    * CVE-2026-10985: Out of bounds read in Skia
    * CVE-2026-10986: Integer overflow in Media
    * CVE-2026-10987: Integer overflow in V8
    * CVE-2026-10988: Use after free in Views
    * CVE-2026-10989: Inappropriate implementation in V8
    * CVE-2026-10990: Use after free in Glic
    * CVE-2026-10991: Use after free in V8
    * CVE-2026-10992: Insufficient data validation in Animation
    * CVE-2026-10993: Heap buffer overflow in Skia
    * CVE-2026-10994: Uninitialized Use in ANGLE
    * CVE-2026-10995: Heap buffer overflow in TabStrip
    * CVE-2026-10996: Inappropriate implementation in Workers
    * CVE-2026-10997: Insufficient policy enforcement in Extensions
    * CVE-2026-10998: Out of bounds read in Media
    * CVE-2026-10999: Out of bounds memory access in ANGLE
    * CVE-2026-11000: Use after free in Fonts
    * CVE-2026-11001: Incorrect security UI in Payments
    * CVE-2026-11002: Use after free in Autofill
    * CVE-2026-11003: Use after free in WebRTC
    * CVE-2026-11004: Out of bounds read in ANGLE
    * CVE-2026-11005: Out of bounds read in ANGLE
    * CVE-2026-11006: Out of bounds read in Dawn
    * CVE-2026-11007: Insufficient validation of untrusted input in WebView
    * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11009: Use after free in USB
    * CVE-2026-11010: Use after free in WebShare
    * CVE-2026-11011: Insufficient policy enforcement in Password Manager
    * CVE-2026-11012: Use after free in Serial
    * CVE-2026-11013: Insufficient validation of untrusted input in Network
    * CVE-2026-11014: Insufficient policy enforcement in Extensions
    * CVE-2026-11015: Out of bounds read in WebGPU
    * CVE-2026-11016: Insufficient validation of untrusted input in Network
    * CVE-2026-11017: Inappropriate implementation in Link Preview
    * CVE-2026-11018: Insufficient policy enforcement in Actor
    * CVE-2026-11019: Inappropriate implementation in Payments
    * CVE-2026-11020: Inappropriate implementation in Extensions
    * CVE-2026-11021: Insufficient validation of untrusted input in GPU
    * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11024: Stack buffer overflow in Skia
    * CVE-2026-11025: Insufficient policy enforcement in Navigation
    * CVE-2026-11026: Insufficient policy enforcement in Extensions
    * CVE-2026-11027: Insufficient validation of untrusted input in Glic
    * CVE-2026-11028: Use after free in Media
    * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
    * CVE-2026-11030: Use after free in Network
    * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11032: Insufficient data validation in Password Manager
    * CVE-2026-11033: Uninitialized Use in WebML
    * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
    * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
    * CVE-2026-11036: Inappropriate implementation in DOM
    * CVE-2026-11037: Out of bounds write in Codecs
    * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
    * CVE-2026-11039: Uninitialized Use in Skia
    * CVE-2026-11040: Use after free in ANGLE
    * CVE-2026-11041: Insufficient validation of untrusted input in Media
    * CVE-2026-11042: Use after free in Views
    * CVE-2026-11043: Out of bounds write in ANGLE
    * CVE-2026-11044: Integer overflow in ANGLE
    * CVE-2026-11045: Insufficient validation of untrusted input in GPU
    * CVE-2026-11046: Insufficient validation of untrusted input in Media
    * CVE-2026-11047: Insufficient validation of untrusted input in Base
    * CVE-2026-11048: Inappropriate implementation in Extensions
    * CVE-2026-11049: Use after free in Password Manager
    * CVE-2026-11050: Use after free in V8
    * CVE-2026-11051: Out of bounds read in ANGLE
    * CVE-2026-11052: Type Confusion in GPU
    * CVE-2026-11053: VULNERABILITY in WebRTC
    * CVE-2026-11054: Use after free in WebRTC
    * CVE-2026-11055: Use after free in ANGLE
    * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
    * CVE-2026-11057: Uninitialized Use in Skia
    * CVE-2026-11058: Integer overflow in CredentialProvider
    * CVE-2026-11059: Use after free in Blink
    * CVE-2026-11060: Use after free in Media
    * CVE-2026-11061: Out of bounds read in ANGLE
    * CVE-2026-11062: Insufficient policy enforcement in Extensions
    * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
    * CVE-2026-11064: Uninitialized Use in GPU
    * CVE-2026-11065: Use after free in ANGLE
    * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11067: Uninitialized Use in Dawn
    * CVE-2026-11068: Use after free in WebSockets
    * CVE-2026-11069: Insufficient validation of untrusted input in Cast
    * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11071: Use after free in Base
    * CVE-2026-11072: Use after free in WebView
    * CVE-2026-11073: Use after free in WebGL
    * CVE-2026-11074: Use after free in WebRTC
    * CVE-2026-11075: Out of bounds read in V8
    * CVE-2026-11076: Type Confusion in CSS
    * CVE-2026-11077: Out of bounds read in Dawn
    * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
    * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11080: Use after free in WebView
    * CVE-2026-11081: Policy bypass in Canvas
    * CVE-2026-11082: Use after free in GPU
    * CVE-2026-11083: Inappropriate implementation in Password Manager
    * CVE-2026-11084: Inappropriate implementation in Password Manager
    * CVE-2026-11085: Integer overflow in GPU
    * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11087: Uninitialized Use in ANGLE
    * CVE-2026-11088: Integer overflow in ANGLE
    * CVE-2026-11089: Uninitialized Use in Media
    * CVE-2026-11090: Uninitialized Use in ANGLE
    * CVE-2026-11091: Inappropriate implementation in Dawn
    * CVE-2026-11092: Insufficient policy enforcement in DevTools
    * CVE-2026-11093: Insufficient validation of untrusted input in Printing
    * CVE-2026-11094: Use after free in Codecs
    * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11096: Out of bounds read in WebRTC
    * CVE-2026-11097: Inappropriate implementation in WebView
    * CVE-2026-11098: Insufficient validation of untrusted input in GPU
    * CVE-2026-11099: Vulnerability in Skia
    * CVE-2026-11100: Use after free in File Input
    * CVE-2026-11101: Uninitialized Use in Dawn
    * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-11103: Inappropriate implementation in Installer
    * CVE-2026-11104: Uninitialized Use in ANGLE
    * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
    * CVE-2026-11106: Inappropriate implementation in Media
    * CVE-2026-11107: Inappropriate implementation in Downloads
    * CVE-2026-11108: Inappropriate implementation in NFC
    * CVE-2026-11109: Uninitialized Use in ANGLE
    * CVE-2026-11110: Uninitialized Use in ANGLE
    * CVE-2026-11111: Out of bounds read in ANGLE
    * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11114: Use after free in Device Trust
    * CVE-2026-11115: Use after free in Updater
    * CVE-2026-11116: Use after free in Chromoting
    * CVE-2026-11117: Use after free in Views
    * CVE-2026-11118: Use after free in WebRTC
    * CVE-2026-11119: Insufficient validation of untrusted input in GPU
    * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
    * CVE-2026-11121: Insufficient validation of untrusted input in Skia
    * CVE-2026-11122: Inappropriate implementation in Keyboard
    * CVE-2026-11123: Uninitialized Use in ANGLE
    * CVE-2026-11124: Heap buffer overflow in Skia
    * CVE-2026-11125: Use after free in Compositing
    * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11127: Inappropriate implementation in WebAPKs
    * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
    * CVE-2026-11129: Inappropriate implementation in Extensions
    * CVE-2026-11130: Use after free in Media
    * CVE-2026-11131: Use after free in Autofill
    * CVE-2026-11132: Policy bypass in Paint
    * CVE-2026-11133: Insufficient policy enforcement in Paint
    * CVE-2026-11134: Insufficient data validation in Media
    * CVE-2026-11135: Insufficient policy enforcement in Autofill
    * CVE-2026-11136: Use after free in Canvas
    * CVE-2026-11137: Uninitialized Use in ANGLE
    * CVE-2026-11138: Uninitialized Use in ANGLE
    * CVE-2026-11139: Policy bypass in Paint
    * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-11141: Uninitialized Use in Audio
    * CVE-2026-11142: Policy bypass in Paint
    * CVE-2026-11143: Heap buffer overflow in Extensions
    * CVE-2026-11144: Use after free in Media
    * CVE-2026-11145: Race in Geolocation
    * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11147: Use after free in WebML
    * CVE-2026-11148: Inappropriate implementation in Payments
    * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11150: Inappropriate implementation in XML
    * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11152: Object lifecycle issue in Dawn
    * CVE-2026-11153: Side-channel information leakage in Forms
    * CVE-2026-11154: Use after free in Dawn
    * CVE-2026-11155: Insufficient policy enforcement in CSS
    * CVE-2026-11156: Inappropriate implementation in CSS
    * CVE-2026-11157: Script injection in Accessibility
    * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
    * CVE-2026-11159: Uninitialized Use in Skia
    * CVE-2026-11160: Out of bounds read in Input
    * CVE-2026-11161: Insufficient data validation in DataTransfer
    * CVE-2026-11162: Insufficient policy enforcement in CSS
    * CVE-2026-11163: Use after free in Messages
    * CVE-2026-11164: Use after free in Blink
    * CVE-2026-11165: Use after free in WebMIDI
    * CVE-2026-11166: Inappropriate implementation in SVG
    * CVE-2026-11167: Inappropriate implementation in WebView
    * CVE-2026-11168: Insufficient policy enforcement in Extensions
    * CVE-2026-11169: Inappropriate implementation in XML
    * CVE-2026-11170: Inappropriate implementation in Chromoting
    * CVE-2026-11171: Integer overflow in Blink
    * CVE-2026-11172: Incorrect security UI in Contact Picker
    * CVE-2026-11173: Out of bounds write in V8
    * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
    * CVE-2026-11175: Incorrect security UI in Messages
    * CVE-2026-11176: Inappropriate implementation in Media
    * CVE-2026-11177: Use after free in Omnibox
    * CVE-2026-11178: Policy bypass in WebView
    * CVE-2026-11179: Inappropriate implementation in ORB
    * CVE-2026-11180: Policy bypass in SVG
    * CVE-2026-11181: Inappropriate implementation in Media Session
    * CVE-2026-11182: Inappropriate implementation in SVG
    * CVE-2026-11183: Out of bounds read in GWP-ASan
    * CVE-2026-11184: Insufficient policy enforcement in Actor
    * CVE-2026-11185: Use after free in V8
    * CVE-2026-11186: Inappropriate implementation in CSS
    * CVE-2026-11187: Insufficient policy enforcement in Glic
    * CVE-2026-11188: Use after free in USB
    * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11190: Insufficient policy enforcement in Extensions
    * CVE-2026-11191: Out of bounds memory access in ANGLE
    * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11193: Insufficient policy enforcement in Password Manager
    * CVE-2026-11194: Inappropriate implementation in Network
    * CVE-2026-11195: Inappropriate implementation in MHTML
    * CVE-2026-11196: Type Confusion in XML
    * CVE-2026-11197: Insufficient policy enforcement in Workers
    * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
    * CVE-2026-11200: Inappropriate implementation in WebRTC
    * CVE-2026-11201: Use after free in ServiceWorker
    * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11203: Policy bypass in GPU
    * CVE-2026-11204: Inappropriate implementation in Signin
    * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11206: Policy bypass in ServiceWorker
    * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
    * CVE-2026-11208: Use after free in Codecs
    * CVE-2026-11209: Insufficient policy enforcement in Passwords
    * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
    * CVE-2026-11211: Integer overflow in V8
    * CVE-2026-11212: Insufficient policy enforcement in DevTools
    * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
    * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
    * CVE-2026-11215: Inappropriate implementation in Cronet
    * CVE-2026-11216: Incorrect security UI in File Input
    * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
    * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
    * CVE-2026-11219: Insufficient data validation in Navigation
    * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
    * CVE-2026-11222: Incorrect security UI in Tab Strip
    * CVE-2026-11223: Insufficient validation of untrusted input in Network
    * CVE-2026-11224: Use after free in Chromoting
    * CVE-2026-11225: Incorrect security UI in WebUI
    * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
    * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
    * CVE-2026-11228: Incorrect security UI in File Input
    * CVE-2026-11229: Insufficient policy enforcement in Enterprise
    * CVE-2026-11230: Use after free in Extensions
    * CVE-2026-11231: Inappropriate implementation in Safe Browsing
    * CVE-2026-11232: Inappropriate implementation in TabGroups
    * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
    * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
    * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
    * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
    * CVE-2026-11237: Insufficient validation of untrusted input in Media
    * CVE-2026-11238: Inappropriate implementation in DevTools
    * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11240: Insufficient validation of untrusted input in Loader
    * CVE-2026-11241: Insufficient validation of untrusted input in Cast
    * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
    * CVE-2026-11243: Incorrect security UI in Downloads
    * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
    * CVE-2026-11245: Inappropriate implementation in Payments
    * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
    * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
    * CVE-2026-11248: Policy bypass in Google Lens
    * CVE-2026-11249: Use after free in Network
    * CVE-2026-11250: Inappropriate implementation in DevTools
    * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11252: Policy bypass in Content Settings
    * CVE-2026-11253: Race in Permissions
    * CVE-2026-11254: Inappropriate implementation in Permissions
    * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
    * CVE-2026-11256: Out of bounds read in GPU
    * CVE-2026-11257: Inappropriate implementation in Browser
    * CVE-2026-11258: Inappropriate implementation in File System Access
    * CVE-2026-11259: Insufficient validation of untrusted input in Cast
    * CVE-2026-11260: Policy bypass in Permissions
    * CVE-2026-11261: Insufficient validation of untrusted input in PDF
    * CVE-2026-11262: Use after free in TabStrip
    * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
    * CVE-2026-11264: Policy bypass in Content Security Policy
    * CVE-2026-11265: Insufficient data validation in Autofill
    * CVE-2026-11266: Policy bypass in SafeBrowsing
    * CVE-2026-11267: Insufficient policy enforcement in Extensions
    * CVE-2026-11268: Uninitialized Use in ANGLE
    * CVE-2026-11269: Inappropriate implementation in Extensions
    * CVE-2026-11270: Inappropriate implementation in UI
    * CVE-2026-11271: Incorrect security UI in Passwords
    * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
    * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
    * CVE-2026-11274: Inappropriate implementation in DOM Distiller
    * CVE-2026-11275: Insufficient policy enforcement in Page Info
    * CVE-2026-11276: Inappropriate implementation in Cast
    * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11278: Inappropriate implementation in CustomTabs
    * CVE-2026-11279: Out of bounds read in DevTools
    * CVE-2026-11280: Insufficient validation of untrusted input in Signin
    * CVE-2026-11281: Integer overflow in Chromoting
    * CVE-2026-11282: Policy bypass in Sandbox
    * CVE-2026-11283: Policy bypass in Shortcuts
    * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
    * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
    * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11288: Policy bypass in CSS
    * CVE-2026-11289: Side-channel information leakage in Paint
    * CVE-2026-11290: Integer overflow in WebView
    * CVE-2026-11291: Policy bypass in Android Autofill
    * CVE-2026-11292: Policy bypass in Blink
    * CVE-2026-11293: Use after free in Input
    * CVE-2026-11294: Inappropriate implementation in Passwords
    * CVE-2026-11295: Inappropriate implementation in WebView
    * CVE-2026-11296: Inappropriate implementation in ImageCapture
    * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
    * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11299: Out of bounds read in Fonts
    * CVE-2026-11300: Inappropriate implementation in Permissions
    * CVE-2026-11301: Out of bounds read in LiveCaption
    * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11303: Use after free in PDFium
    * CVE-2026-11304: Use after free in PDFium
    * CVE-2026-11305: Use after free in PDFium
    * CVE-2026-11306: Use after free in PDFium
    * CVE-2026-11307: Use after free in PDFium
    * CVE-2026-11308: Inappropriate implementation in Extensions
    * CVE-2026-11309: Insufficient policy enforcement in History


author: Than Ngo <than@redhat.com> - 149.0.7827.102-1
changelog:
  - Update to 149.0.7827.102
    * CVE-2026-11628: Use after free in Ozone
    * CVE-2026-11629: Use after free in Ozone
    * CVE-2026-11630: Use after free in File Input
    * CVE-2026-11631: Use after free in Aura
    * CVE-2026-11632: Use after free in TabStrip
    * CVE-2026-11633: Use after free in Bluetooth
    * CVE-2026-11634: Use after free in Gamepad
    * CVE-2026-11635: Use after free in Bluetooth
    * CVE-2026-11636: Use after free in Autofill
    * CVE-2026-11637: Use after free in Views
    * CVE-2026-11638: Use after free in Printing
    * CVE-2026-11639: Use after free in Compositing
    * CVE-2026-11640: Integer overflow in libyuv
    * CVE-2026-11641: Use after free in Bluetooth
    * CVE-2026-11642: Use after free in Web Apps
    * CVE-2026-11643: Use after free in Proxy
    * CVE-2026-11644: Use after free in Views
    * CVE-2026-11645: Out of bounds memory access in V8
    * CVE-2026-11646: Use after free in ViewTransitions
    * CVE-2026-11647: Use after free in Printing
    * CVE-2026-11648: Use after free in FullScreen
    * CVE-2026-11649: Use after free in V8
    * CVE-2026-11650: Use after free in V8
    * CVE-2026-11651: Use after free in Network
    * CVE-2026-11652: Use after free in Extensions
    * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11654: Use after free in CameraCapture
    * CVE-2026-11655: Integer overflow in Media
    * CVE-2026-11656: Use after free in ServiceWorker
    * CVE-2026-11657: Use after free in Payments
    * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11659: Insufficient validation of untrusted input in UI
    * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11661: Use after free in Views
    * CVE-2026-11662: Type Confusion in Bindings
    * CVE-2026-11663: Use after free in Skia
    * CVE-2026-11664: Use after free in Payments
    * CVE-2026-11665: Out of bounds read in Dawn
    * CVE-2026-11666: Insufficient validation of untrusted input in Input
    * CVE-2026-11667: Out of bounds read in WebRTC
    * CVE-2026-11668: Uninitialized Use in Codecs
    * CVE-2026-11669: Integer overflow in Media
    * CVE-2026-11670: Use after free in PDF
    * CVE-2026-11671: Use after free in Navigation
    * CVE-2026-11672: Out of bounds write in GPU
    * CVE-2026-11673: Use after free in InterestGroups
    * CVE-2026-11674: Use after free in Guest View
    * CVE-2026-11675: Insufficient validation of untrusted input in Skia
    * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11677: Race in Network
    * CVE-2026-11678: Integer overflow in libyuv
    * CVE-2026-11679: Use after free in Codecs
    * CVE-2026-11680: Use after free in Media
    * CVE-2026-11681: Use after free in Ozone
    * CVE-2026-11682: Insufficient validation of untrusted input in Views
    * CVE-2026-11683: Use after free in WebCodecs
    * CVE-2026-11684: Insufficient policy enforcement in Network
    * CVE-2026-11685: Insufficient data validation in MediaCapture
    * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11687: Use after free in Dawn
    * CVE-2026-11688: Object lifecycle issue in SVG
    * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
    * CVE-2026-11690: Out of bounds read and write in Media
    * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11692: Use after free in Read Anything
    * CVE-2026-11693: Inappropriate implementation in Plugins
    * CVE-2026-11694: Use after free in ServiceWorker
    * CVE-2026-11695: Inappropriate implementation in Passwords
    * CVE-2026-11696: Uninitialized Use in Video
    * CVE-2026-11697: Insufficient validation of untrusted input in UI
    * CVE-2026-11698: Use after free in Bluetooth
    * CVE-2026-11699: Use after free in Bluetooth
    * CVE-2026-11700: Use after free in Tracing
    * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
  - Refresh ppc64le patches


author: Than Ngo <than@redhat.com> - 149.0.7827.114-1
changelog:
  - Update to 149.0.7827.114
    * CVE-2026-12007: Use after free  Core
    * CVE-2026-12008: Use after free  DigitalCredentials
    * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
    * CVE-2026-12010: Heap buffer overflow  GPU
    * CVE-2026-12011: Use after free  WebMIDI
    * CVE-2026-12012: Use after free  Network
    * CVE-2026-12013: Use after free  Media
    * CVE-2026-12014: Use after free  Cast
    * CVE-2026-12015: Use after free  Autofill
    * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
    * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
    * CVE-2026-12018: Inappropriate implementation  Mojo
    * CVE-2026-12019: Out of bounds write  Codecs
    * CVE-2026-12020: Use after free  Autofill
    * CVE-2026-12022: Race  Safe Browsing
    * CVE-2026-12023: Use after free  GPU
    * CVE-2026-12024: Insufficient policy enforcement  DevTools
    * CVE-2026-12025: Insufficient validation of untrusted input  Network
    * CVE-2026-12026: Out of bounds read  Video
    * CVE-2026-12027: Insufficient policy enforcement  Headless
    * CVE-2026-12028: Use after free  GPU
    * CVE-2026-12029: Use after free  Video
    * CVE-2026-12030: Heap buffer overflow  GPU
    * CVE-2026-12031: Inappropriate implementation  Views
    * CVE-2026-12032: Inappropriate implementation  Passwords
    * CVE-2026-12033: Out of bounds read  VideoCapture
    * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
    * CVE-2026-12035: Use after free  Views
  - Disable AI Mode settings


author: Than Ngo <than@redhat.com> - 149.0.7827.155-1
changelog:
  - Update to 149.0.7827.155
    * CVE-2026-12437: Use after free in WebShare
    * CVE-2026-12438: Inappropriate implementation in WebView
    * CVE-2026-12439: Use after free in Digital Credentials
    * CVE-2026-12440: Use after free in DigitalCredentials
    * CVE-2026-12441: Use after free in File Input
    * CVE-2026-12442: Use after free in Passwords
    * CVE-2026-12443: Use after free in Web Authentication
    * CVE-2026-12444: Out of bounds read in Chromoting
    * CVE-2026-12445: Use after free in Extensions
    * CVE-2026-12446: Insufficient data validation in Passwords
    * CVE-2026-12447: Heap buffer overflow in WebRTC
    * CVE-2026-12448: Inappropriate implementation in WebView
    * CVE-2026-12449: Use after free in Chromoting
    * CVE-2026-12450: Inappropriate implementation in Media
    * CVE-2026-12451: Use after free in DigitalCredentials
    * CVE-2026-12452: Use after free in Downloads
    * CVE-2026-12453: Insufficient validation of untrusted input in Input
    * CVE-2026-12454: Race in Safe Browsing
    * CVE-2026-12455: Use after free in Tab Strip
    * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
    * CVE-2026-12457: Insufficient data validation in Extensions
    * CVE-2026-12458: Incorrect security UI in Passwords
    * CVE-2026-12459: Inappropriate implementation in Serial
    * CVE-2026-12460: Insufficient policy enforcement in File System Access
    * CVE-2026-12461: Out of bounds read in WebRTC
    * CVE-2026-12462: Use after free in Media
    * CVE-2026-12463: Inappropriate implementation in Views
    * CVE-2026-12464: Use after free in Browser
    * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
    * CVE-2026-12466: Heap buffer overflow in WebRTC
    * CVE-2026-12467: Use after free in Extensions
    * CVE-2026-12468: Inappropriate implementation in Updater
    * CVE-2026-12469: Uninitialized Use in GPU


author: Simone Caronni <negativo17@gmail.com> - 2.48-2
changelog:
  - Parse the Architectures field in the Release file to select
    architectures. Fixes mirroring specific architectures from
    ports.ubuntu.com.


author: Michel Lind <salimma@fedoraproject.org> - 2.5.0-2
changelog:
  - incorporate fixes from #9 by Steve Traylen <steve.traylen@cern.ch>
  - * set PBR_VERSION
  - * simplified git checkout and tarball generation
  - * enforce that license is shipped
  - * add import checks
  - * exclude tests
  - convert the git checkout procedure into a shell script for automation
  - switch tarball to zstd compression
  - automatically apply patches (if any)
  - add rpmlint config


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-2
changelog:
  - Modernize spec: use %make_install and add %check section
  - Use %make_install instead of manual make install
  - Move validation to %check
  - Remove deprecated %ldconfig_scriptlets
  - Fix trailing whitespace in Summary


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-3
changelog:
  - Modernize macros and paths
  - Use %{_metainfodir} for metainfo
  - Sort BuildRequires and change Source0 to Source
  - Clean up %prep chmod calls
  - Add %license to doc subpackage


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-4
changelog:
  - Convert BuildRequires to pkgconfig style
  - Use pkgconfig() for atk, cairo, gtk+-3.0, libofx, and libsoup-3.0


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-5
changelog:
  - Final cleanup of spec file
  - Add -p1 to %autosetup
  - Use trailing slashes for directories in %files
  - Consistent use of %{_metainfodir}


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Than Ngo <than@redhat.com> - 6.0.2.1-1
changelog:
  - Fix rhbz#2481429, Update to 6.0.2.1
  - Fix rhbz#2476573, CVE-2026-42144 krita: integer overflow in PNM size check bypasses memory guard


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Miroslav Suchý <msuchy@redhat.com> 26-1
changelog:
  - in verbose mode always print the text of license
  - finally make transformer work
  - fixes and more tests
  - add test for BSD-3-Clause-Clear
  - add tests
  - rework handling not-allowed licensing with exception
  - do not print the long traceback with -v on mismatch


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)
  - Use existing dependency Crypt::URandom rather than Crypt::SysRandom to
    generate seed in Crypt::DSA::KeyChain; both modules use getrandom() as
    the backend on Linux, and Crypt::SysRandom is currently not available
    in EPEL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Fixed key material reuse for multiple signing events (CVE-2026-12205,
      CWE-323)
      - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
        on the key and not regenerated), allowing private-key recovery from two
        signatures over different messages
      - Now generates a fresh nonce per signature
      - Keys used to sign more than once with an affected version should be
        considered compromised


author: Paul Howarth <paul@city-fan.org> - 0.261630-1
changelog:
  - Update to 0.261630 (rhbz#2488228)
    - Change the default hash algorithm to HMAC-SHA256, and increase the default
      number of iterations to 600,000, in line with current OWASP recommendations
      (CVE-2026-9641)
    - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
      builtin rand(), which is not cryptographically secure (CVE-2026-9638)
    - Use a constant-time comparison in 'validate' to avoid timing attacks
      (CVE-2017-20240)
  - Switch to Module::Build::Tiny flow
  - Package new README file


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.8.0-1
changelog:
  - update to 1.8.0
  - raise dependency on PHP 8.2
  - switch to phpunit11
  - drop pear/pecl dependency
  - sources from github
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.3.0-1
changelog:
  - update to 2.3.0
  - raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 1.2.1-1
changelog:
  - update to 1.2.1
  - PHP License updated from version 3 to version 4 (BSD-3-Clause)
  - drop pear/pecl dependency
  - sources from github
  - add php_base option to create namespaced packages
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: David Beveridge <dave@bevhost.com> - 2.1.0-1
changelog:
  - Update to 2.1 with new features e.g. Reload configuration on SIGHUP
  - inotify support to watch domains-file for changes and reconfigure automatically.


author: Gwyn Ciesla <gwync@protonmail.com> - 3.4.0-1
changelog:
  - 3.4.0
    - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
      packet-handler class used internally (mostly for testing, but advanced
      users may find this useful when doing deep hacks)
    - Address CVE 2023-48795 (https://terrapin-attack.com/) a.k.a. the "Terrapin
      Attack", a vulnerability found in the SSH protocol re: treatment of packet
      sequence numbers) as follows:
      - The vulnerability only impacts encrypt-then-MAC digest algorithms in
        tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
        currently only implements 'hmac-sha2-(256|512)-etm' in tandem with
        'AES-CBC'; if you are unable to upgrade to Paramiko versions containing
        the below fixes right away, you may instead use the 'disabled_algorithms'
        connection option to disable the ETM MACs and/or the CBC ciphers (this
        option is present in Paramiko ≥ 2.6)
      - As the fix for the vulnerability requires both ends of the connection to
        cooperate, the below changes will only take effect when the remote end is
        OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
        patch version) and configured to use the new "strict kex" mode (Paramiko
        will always attempt to use "strict kex" mode if offered by the server,
        unless you override this by specifying 'strict_kex=False' in
        'Transport.__init__')
      - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
        when protocol messages are received in unexpected order; this includes
        situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
        exchange, which are no longer allowed during strict mode
      - Key (re)negotiation -- i.e. 'MSG_NEWKEYS', whenever it is encountered --
        now resets packet sequence numbers (this should be invisible to users
        during normal operation, only causing exceptions if the exploit is
        encountered, which will usually result in, again, 'MessageOrderError')
      - Sequence number rollover will now raise 'SSHException' if it occurs
        during initial key exchange (regardless of strict mode status)
    - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the
      original implementation made assumptions based on an OpenSSH implementation
      detail


author: Paul Howarth <paul@city-fan.org> - 3.4.0-6
changelog:
  - Fix detection of SHA1 signing support
    https://github.com/paramiko/paramiko/pull/2420
    https://github.com/pyca/cryptography/issues/11332
    https://github.com/PyO3/pyo3/issues/3059
  - Remove cache Sphinx build folder ".doctrees"


author: Paul Howarth <paul@city-fan.org> - 3.4.1-1
changelog:
  - Update to 3.4.1
    - Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
      this should prevent 'CryptographyDeprecationWarning' from appearing upon
      import (GH#2419, GH#2421)
    - Modify a test-harness skiptest check to work with newer versions of
      Cryptography (GH#2420)
    - Fix a 64-bit-ism in the test suite so the tests don't encounter a false
      negative on 32-bit systems (GH#2353)


author: Paul Howarth <paul@city-fan.org> - 3.5.0-1
changelog:
  - Update to 3.5.0 (rhbz#2312503)
    - Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
      (GH#982, GH#2157, GH#2444, rhbz#2311855); this functionality has been
      tested in client mode against OpenSSH 9.0, 9.2 and 9.6, as well as against
      a number of proprietary appliance SSH servers
    - Check for 'None' transport members inside '~paramiko.channel.Channel' when
      closing the channel; this likely doesn't come up much in the real world,
      but was causing warnings in the test suite


author: Paul Howarth <paul@city-fan.org> - 3.5.1-1
changelog:
  - Update to 3.5.1 (rhbz#2343673)
    - Private key material is now explicitly 'unpadded' during decryption,
      removing a reliance on some lax OpenSSL behavior and making us compatible
      with future Cryptography releases (GH#2490)


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


