<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="59">
<package pkgid="b3a0de3d78e5646c17dc5bce8a67e27b233e5be2aea53f0cd9de379fb642e0bb" name="alertmanager-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.33.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.31.1-1" date="1772798400">- Initial package after rename - Closes rhbz#2444340</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.32.1-1" date="1777464000">- Update to 0.32.1 - Closes rhbz#2456659</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.33.0-1" date="1781265600">- Update to 0.33.0 - Closes rhbz#2485517</changelog>
</package>
<package pkgid="7036ee0f2542b98d92ad9b343b67717e730140807f0d6a365e5180ed570575b0" name="alertmanager-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.33.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.31.1-1" date="1772798400">- Initial package after rename - Closes rhbz#2444340</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.32.1-1" date="1777464000">- Update to 0.32.1 - Closes rhbz#2456659</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.33.0-1" date="1781265600">- Update to 0.33.0 - Closes rhbz#2485517</changelog>
</package>
<package pkgid="a5708ba3abd82b3170bd32d7c9de35aa4b6cbbe6ab97398800c98de1fa84dfa2" name="betterleaks-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.5.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
</package>
<package pkgid="a4c881fb5107c7c8af417dd727cfa6c0081beaf045ffd64594effc926ba0945c" name="betterleaks-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.5.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
</package>
<package pkgid="0ffad9d4339f35a754db5d45ddb8324cb7437a733527139b8d47d21fd7533809" name="bird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.3-1" date="1756987200">- Upgrade to 3.1.3 (#2393366)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.4-1" date="1758542400">- Upgrade to 3.1.4 (#2397496)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.5-1" date="1765022400">- Upgrade to 3.1.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.0-1" date="1766750400">- Upgrade to 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.1-1" date="1775217600">- Upgrade to 3.2.1</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.0-1" date="1780488000">- Upgrade to 3.3.0 (#2481185)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.1-1" date="1781092800">- Upgrade to 3.3.1 (#2487252)</changelog>
</package>
<package pkgid="1f110e1584f5689710ce391eccc8b671691065a0a2abfbdfa243f7ac8aec733a" name="bird-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.3.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.3-1" date="1756987200">- Upgrade to 3.1.3 (#2393366)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.4-1" date="1758542400">- Upgrade to 3.1.4 (#2397496)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.5-1" date="1765022400">- Upgrade to 3.1.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.0-1" date="1766750400">- Upgrade to 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.1-1" date="1775217600">- Upgrade to 3.2.1</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.0-1" date="1780488000">- Upgrade to 3.3.0 (#2481185)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.1-1" date="1781092800">- Upgrade to 3.3.1 (#2487252)</changelog>
</package>
<package pkgid="436a9958d0554cedeb0f1a5a16cec67ae899345682cf54b4391c6fb14f77d644" name="chromium-common-debuginfo" arch="ppc64le">
  <version epoch="0" ver="149.0.7827.114" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-1" date="1776945600">- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-2" date="1777204800">- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.137-1" date="1777464000">- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.96-1" date="1778068800">- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.167-1" date="1778846400">- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.178-1" date="1779278400">- Update to 148.0.7778.178
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
</package>
<package pkgid="6e0a47c79841df314615d0bbf6f18b293ed483295f72bacd3327829411b894f4" name="chromium-debuginfo" arch="ppc64le">
  <version epoch="0" ver="149.0.7827.114" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-1" date="1776945600">- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-2" date="1777204800">- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.137-1" date="1777464000">- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.96-1" date="1778068800">- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.167-1" date="1778846400">- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.178-1" date="1779278400">- Update to 148.0.7778.178
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
</package>
<package pkgid="0b68692694bf2d9c475de28fead2185fd91d23a66b37c1406e84b15ed3c9b465" name="chromium-headless-debuginfo" arch="ppc64le">
  <version epoch="0" ver="149.0.7827.114" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-1" date="1776945600">- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-2" date="1777204800">- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.137-1" date="1777464000">- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.96-1" date="1778068800">- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.167-1" date="1778846400">- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.178-1" date="1779278400">- Update to 148.0.7778.178
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
</package>
<package pkgid="505c7a7d4169faea2471765562824a9ddadb9411cafba0e9c47d0628c6f0fdc0" name="chromium-qt5-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="149.0.7827.114" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-1" date="1776945600">- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-2" date="1777204800">- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.137-1" date="1777464000">- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.96-1" date="1778068800">- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.167-1" date="1778846400">- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.178-1" date="1779278400">- Update to 148.0.7778.178
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
</package>
<package pkgid="0a68de214d15a11672e77eb3a52925e76f60de7ce9a655ab47ef43d995ea1ddb" name="chromium-qt6-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="149.0.7827.114" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-1" date="1776945600">- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.116-2" date="1777204800">- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 147.0.7727.137-1" date="1777464000">- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.96-1" date="1778068800">- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.167-1" date="1778846400">- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.178-1" date="1779278400">- Update to 148.0.7778.178
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 148.0.7778.215-1" date="1780056000">- Update to 148.0.7778.215
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.53-1" date="1780660800">- Update to 149.0.7827.53
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.102-1" date="1781006400">- Update to 149.0.7827.102
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
- Refresh ppc64le patches</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.114-1" date="1781265600">- Update to 149.0.7827.114
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views
- Disable AI Mode settings</changelog>
</package>
<package pkgid="274457b4a5213407338811d025f16e29c6a54cc7297223be7b385b81adb0644c" name="coturn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="c8de7417db106f11a9aee71c267f697cc4b7e1b4db05c050d6c8539ec71507e0" name="coturn-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="5830c074042e39ce5d1435ed4bfedca5d9ad8e182ac1142cf3d2fa5b98ec2644" name="coturn-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="4219ac1f97702aca22dea9eb4950b47d166a77f068e708107c51591048167c0a" name="gh-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.94.0" rel="1.el10_2"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.86.0-3" date="1770033600">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.0-1" date="1771416000">- Update to 2.87.0 upstream release
- Resolves: rhbz#2440729</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.87.0-2" date="1771416001">- Drop patch included in 2.87.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.3-1" date="1771848000">- Update to 2.87.3 upstream release
- Resolves: rhbz#2441488</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.88.1-1" date="1773316800">- Update to 2.88.1 upstream release
- Resolves: rhbz#2446304</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-1" date="1777032000">- Update to 2.91.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-3" date="1777032001">- Make telemetry sending opt in</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.92.0-1" date="1777896000">- Update to 2.92.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.93.0-1" date="1779969600">- Update to 2.93.0. Fixes rhbz#2482337.</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.94.0-1" date="1781179200">- Update to 2.94.0 upstream release
- Resolves: rhbz#2487830</changelog>
</package>
<package pkgid="38c888ca99cb726526462c82cb44405bfd5ca52134b7d57ab8bb1a23aef0f9dc" name="gh-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.94.0" rel="1.el10_2"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.86.0-3" date="1770033600">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.0-1" date="1771416000">- Update to 2.87.0 upstream release
- Resolves: rhbz#2440729</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.87.0-2" date="1771416001">- Drop patch included in 2.87.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.3-1" date="1771848000">- Update to 2.87.3 upstream release
- Resolves: rhbz#2441488</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.88.1-1" date="1773316800">- Update to 2.88.1 upstream release
- Resolves: rhbz#2446304</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-1" date="1777032000">- Update to 2.91.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-3" date="1777032001">- Make telemetry sending opt in</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.92.0-1" date="1777896000">- Update to 2.92.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.93.0-1" date="1779969600">- Update to 2.93.0. Fixes rhbz#2482337.</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.94.0-1" date="1781179200">- Update to 2.94.0 upstream release
- Resolves: rhbz#2487830</changelog>
</package>
<package pkgid="998201f71b58f29b023c5b351c738d042e23f42c3d4bec5e112fc97ec96bb23d" name="glab-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.102.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.2-1" date="1771156800">- Update to 1.85.2 upstream release
- Resolves: rhbz#2435193</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.3-1" date="1771329600">- Update to 1.85.3 upstream release
- Resolves: rhbz#2440422</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.86.0-1" date="1771416000">- Update to 1.86.0 upstream release
- Resolves: rhbz#2440787</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.88.0-1" date="1772625600">- Update to 1.88.0 upstream release
- Resolves: rhbz#2443918</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.89.0-1" date="1772712000">- Update to 1.89.0 upstream release
- Resolves: rhbz#2444915</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.90.0-1" date="1774267200">- Update to 1.90.0 upstream release
- Resolves: rhbz#2450398</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
</package>
<package pkgid="f90b64b02297f6d35b0e558cef0fb154f24e4c9fadd141f8a41c84fc6e1d63a5" name="glab-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.102.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.2-1" date="1771156800">- Update to 1.85.2 upstream release
- Resolves: rhbz#2435193</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.3-1" date="1771329600">- Update to 1.85.3 upstream release
- Resolves: rhbz#2440422</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.86.0-1" date="1771416000">- Update to 1.86.0 upstream release
- Resolves: rhbz#2440787</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.88.0-1" date="1772625600">- Update to 1.88.0 upstream release
- Resolves: rhbz#2443918</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.89.0-1" date="1772712000">- Update to 1.89.0 upstream release
- Resolves: rhbz#2444915</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.90.0-1" date="1774267200">- Update to 1.90.0 upstream release
- Resolves: rhbz#2450398</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
</package>
<package pkgid="157427151d6f79561f78ea7d1ffc269f61923bf240a9622392027debbe44a303" name="gn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2413^20260614.28df2d93df29" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2352^20260326.b2ac0e7a9089-1" date="1774526400">- Update to version 2352</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2354^20260408.6e8dcdebbadf-1" date="1775736000">- Update to version 2352</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2359^20260412.ec56d4d935a0-1" date="1775995200">- Update to version 2359</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2381^20260429.fa9dacd8eff0-1" date="1777550400">- Update to version 2381</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-1" date="1778328000">- Update to version 2395</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-2" date="1779105600">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-3" date="1779105601">- Just ship Markdown sources; don’t bother HTMLifying with pandoc</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2400^20260518.f9c7754576bc-1" date="1779105602">- Update to version 2400</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
</package>
<package pkgid="4943381c86a7cad2821d7a8b0c45084edf2e6d0f3334e7cb9d8716dd42235eee" name="gn-debugsource" arch="ppc64le">
  <version epoch="0" ver="2413^20260614.28df2d93df29" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2352^20260326.b2ac0e7a9089-1" date="1774526400">- Update to version 2352</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2354^20260408.6e8dcdebbadf-1" date="1775736000">- Update to version 2352</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2359^20260412.ec56d4d935a0-1" date="1775995200">- Update to version 2359</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2381^20260429.fa9dacd8eff0-1" date="1777550400">- Update to version 2381</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-1" date="1778328000">- Update to version 2395</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-2" date="1779105600">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2395^20260509.78e67afc82fa-3" date="1779105601">- Just ship Markdown sources; don’t bother HTMLifying with pandoc</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2400^20260518.f9c7754576bc-1" date="1779105602">- Update to version 2400</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
</package>
<package pkgid="3c15c700ff73fe94dfa5dfaca4fadb346767be8d96abd3fb3153c26df07de380" name="iverilog-debuginfo" arch="ppc64le">
  <version epoch="0" ver="13.0" rel="7.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-10" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-11" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-12" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-1" date="1772625600">- update to iverilog-13, fixes rhbz#2443718</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-2" date="1772625601">- uploaded sources, remove upstreamed patch</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-3" date="1772625602">- added README.md to documentation</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-4" date="1772625603">- build documentation with python3-sphinx</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-5" date="1780920000">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-6" date="1780920001">- split iverilog in devel, static and binary packages</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-7" date="1780920002">- simplify .gitignore</changelog>
</package>
<package pkgid="bd2ffbe126594ed69133d2bd057429201f107200e20f6b0551e33db308fe2db3" name="iverilog-debugsource" arch="ppc64le">
  <version epoch="0" ver="13.0" rel="7.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-10" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-11" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-12" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-1" date="1772625600">- update to iverilog-13, fixes rhbz#2443718</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-2" date="1772625601">- uploaded sources, remove upstreamed patch</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-3" date="1772625602">- added README.md to documentation</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-4" date="1772625603">- build documentation with python3-sphinx</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-5" date="1780920000">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-6" date="1780920001">- split iverilog in devel, static and binary packages</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-7" date="1780920002">- simplify .gitignore</changelog>
</package>
<package pkgid="6a039c51fac8cce3efc43a74cc34a965dff6c6408080eb96c1cb22b66b8303e2" name="jfrog-cli-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.108.0" rel="1.el10_2"/>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.85.0-2" date="1764158400">- disable test that requires external Artifactory instance</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.87.0-1" date="1765627200">- update to 2.87.0 (resolves rhbz#2420466)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.87.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.87.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.92.0-1" date="1771502400">- update to 2.92.0 (resolves rhbz#2427925)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.95.0-1" date="1772798400">- update to 2.95.0 (resolves rhbz#2442715)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.98.0-1" date="1775044800">- update to 2.98.0 (resolves rhbz#2446929)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.102.0-1" date="1776859200">- update to 2.102.0 (resolves rhbz#2456564)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.104.1-1" date="1779710400">- update to 2.104.1 (resolves rhbz#2463822)
- exclude uv_test.go, which requires an Artifactory instance</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.108.0-1" date="1781524800">- Update to 2.108.0, conflict with jfrog-cli-v2-jf</changelog>
</package>
<package pkgid="c597d9a6f39ef1e00c4afb959abda6965f0fca86a4aa3c11818e88c1116d58a0" name="jfrog-cli-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.108.0" rel="1.el10_2"/>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.85.0-2" date="1764158400">- disable test that requires external Artifactory instance</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.87.0-1" date="1765627200">- update to 2.87.0 (resolves rhbz#2420466)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.87.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.87.0-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.92.0-1" date="1771502400">- update to 2.92.0 (resolves rhbz#2427925)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.95.0-1" date="1772798400">- update to 2.95.0 (resolves rhbz#2442715)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.98.0-1" date="1775044800">- update to 2.98.0 (resolves rhbz#2446929)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.102.0-1" date="1776859200">- update to 2.102.0 (resolves rhbz#2456564)</changelog>
  <changelog author="Dominik 'Rathann' Mierzejewski &lt;dominik@greysector.net&gt; - 2.104.1-1" date="1779710400">- update to 2.104.1 (resolves rhbz#2463822)
- exclude uv_test.go, which requires an Artifactory instance</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2.108.0-1" date="1781524800">- Update to 2.108.0, conflict with jfrog-cli-v2-jf</changelog>
</package>
<package pkgid="5134891be10727f1e7cc20c54c111f181d6f6447abeabbede16ed53c3e539748" name="nix-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="7cf538be1191e8243dcb40b299dc4dad9b5946c85d33dbf444a150d8bb94504f" name="nix-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="8aced5fda6ada68cba5fcc1d5770d27d400b00872d841d25cc74205a57e901ce" name="nix-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="c4c309e862d3b7d7a41c6408f1e56ed9bbb0bce7aec2f3df3209939ac5d5d318" name="nix-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="0b86ab6bda67e5ccc8895048fc3d88e024f0cc1957bf4af8d53212d8dccb8a9a" name="pam_url-debuginfo" arch="ppc64le">
  <version epoch="1" ver="0.3.3" rel="28.20200410git58e33bf.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-23" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1:0.3.3-24" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-25" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-26" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:0.3.3-27" date="1765972800">- rebuild for new libconfig</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-28" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="78c28062bfb5b2ea6fc8a0d33998fdb6422edb43b9bdb8614c184eaaec0bd088" name="pam_url-debugsource" arch="ppc64le">
  <version epoch="1" ver="0.3.3" rel="28.20200410git58e33bf.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-23" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1:0.3.3-24" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-25" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-26" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:0.3.3-27" date="1765972800">- rebuild for new libconfig</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.3-28" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="e981c5b1c30ac7b8590599126269349bc902b66c5862c113681caa1959c14866" name="perl-GD-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.86" rel="1.el10_2"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.82-2" date="1718020800">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.83-1" date="1719316800">- Update to 2.83
  - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
    but gdlib-config (the check was too strict)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.83-4" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.84-1" date="1767614400">- Update to 2.84
  - Added Makefile.PL --with and --without options to bypass autodetection
    errors or upstream libgd or subsequent library errors (GH#55)
  - Better support MSWin32 without gdlib.pc (requires manual --options and
    --lib_gd_path)
  - Work around broken ExtUtils::PkgConfig-&gt;find (GH#61)
  - Fixed snprintf for newer MSVC (&gt;= VS 2015)
  - Added GD::Image::supported() image types method
  - Added newFromTiffData() method
  - Fixed t/GD.t for unsupported image types
  - Add GIFANIM to the default since 2.0.33 (GH#56)
  - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
  - Add demos/png2jpeg.pl
- Don't disable XPM support if GD config doesn't explicitly require -lX11
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.84-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.85-1" date="1780401600">- Update to 2.85
  - Tolerate runtime TIFF decode failures in autodetect (GH#62)
  - Replace cpm with cpanm in github actions
  - Fixed a minor precedence bug in t/z_manifest.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.86-1" date="1781006400">- Update to 2.86
  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)</changelog>
</package>
<package pkgid="dc29569bec186149431a12ef94f82d511aa33ea398dd74a6427b2ca6d00e9db2" name="perl-GD-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.86" rel="1.el10_2"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.82-2" date="1718020800">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.83-1" date="1719316800">- Update to 2.83
  - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
    but gdlib-config (the check was too strict)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.83-4" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.84-1" date="1767614400">- Update to 2.84
  - Added Makefile.PL --with and --without options to bypass autodetection
    errors or upstream libgd or subsequent library errors (GH#55)
  - Better support MSWin32 without gdlib.pc (requires manual --options and
    --lib_gd_path)
  - Work around broken ExtUtils::PkgConfig-&gt;find (GH#61)
  - Fixed snprintf for newer MSVC (&gt;= VS 2015)
  - Added GD::Image::supported() image types method
  - Added newFromTiffData() method
  - Fixed t/GD.t for unsupported image types
  - Add GIFANIM to the default since 2.0.33 (GH#56)
  - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
  - Add demos/png2jpeg.pl
- Don't disable XPM support if GD config doesn't explicitly require -lX11
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.84-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.85-1" date="1780401600">- Update to 2.85
  - Tolerate runtime TIFF decode failures in autodetect (GH#62)
  - Replace cpm with cpanm in github actions
  - Fixed a minor precedence bug in t/z_manifest.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.86-1" date="1781006400">- Update to 2.86
  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)</changelog>
</package>
<package pkgid="f63de056dbfcb7fbbb65b786eff87f2dcfb2ce7bdb3b069862e07738159134d8" name="php-zstd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1781006400">- update to 0.16.0</changelog>
</package>
<package pkgid="a87a63737dce4613db30e22a8b13612dc75be3372ec3a6d90010e8d83f07578e" name="php-zstd-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1781006400">- update to 0.16.0</changelog>
</package>
<package pkgid="0ad617d8746189ee35c9921b38273a2c1ca416fe61777b98c6463a375741bbb8" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="32afe56e2d2b887d83e4468dc156dcc3543c91a95f1db0dea47feeb81c291cd5" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="c9c48c1e89ab2592923076ae8f4e92a9a0f22c00c5974f1e99e29f15c8f3ccdc" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="bfe1eb2df841da1aa6c6cca9fa1b85ebc05676ff9088a5956c2e5cfb559a5b09" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="85203c26e08397d685595e668f30658288ed3c665ad3a161505e4cfb0a337cc6" name="proftpd-postgresql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="dbd262d597bc14606891f9f088db7588fc2c33a6295432d333d04906d98bf386" name="proftpd-proxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="fe5584f509e560b45cf01895e82f3ef7bebf507587f4695e6b69abebddc9085b" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="8557d9aee8b9fbac91efaaa82f8c482df44c355b585068a0ec99a69bd17fd1dd" name="proftpd-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="12d224ca56237884f418cdfb172503f8fff4aa05dbd5750365406504b3879075" name="prometheus-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.12.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.55.1-1" date="1771848000">- Initial package after renaming from golang-github-prometheus - Closes
  rhbz#2383787</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.10.0-1" date="1772107200">- Update to 3.10.0 - Closes rhbz#2390501</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.0-1" date="1775217600">- Update to 3.11.0 - Close rhbz#2454467</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.1-1" date="1775563200">- Update to 3.11.1 - Closes rhbz#2456248</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.2-1" date="1776081600">- Update to 3.11.2 - Closes rhbz#2457952</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.12.0-1" date="1781265600">- Update to 3.12.0 - Closes rhbz#2482792</changelog>
</package>
<package pkgid="8e87ab07b091cc64f60cd004763200124fc12825be43b66c3439162f966e25c9" name="prometheus-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.12.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.55.1-1" date="1771848000">- Initial package after renaming from golang-github-prometheus - Closes
  rhbz#2383787</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.10.0-1" date="1772107200">- Update to 3.10.0 - Closes rhbz#2390501</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.0-1" date="1775217600">- Update to 3.11.0 - Close rhbz#2454467</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.1-1" date="1775563200">- Update to 3.11.1 - Closes rhbz#2456248</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.2-1" date="1776081600">- Update to 3.11.2 - Closes rhbz#2457952</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.12.0-1" date="1781265600">- Update to 3.12.0 - Closes rhbz#2482792</changelog>
</package>
<package pkgid="83cf66233945029cd1bb54ccac621dfcdc959e7cae8aa741f8cfaa9cdc4e5364" name="pxz-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.999.9" rel="32.beta.20220509git.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-27.beta.20220509git" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-28.beta.20220509git" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-29.beta.20220509git" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-30.beta.20220509git" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-31.beta.20220509git" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-32.beta.20220509git" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="7735d282b2ffd78f7f268c7df84423795a84f194b1bb3475f382c1845326879b" name="pxz-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.999.9" rel="32.beta.20220509git.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-27.beta.20220509git" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-28.beta.20220509git" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-29.beta.20220509git" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-30.beta.20220509git" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-31.beta.20220509git" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.999.9-32.beta.20220509git" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="5f8a2f64d78d91cbaede8dc7420be29236aa05307f31194f93df02d0d8b448be" name="python3.13-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.13.14" rel="1.el10_2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.8-1" date="1759838400">- Update to Python 3.13.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.9-1" date="1760443200">- Update to Python 3.13.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.10-1" date="1764763200">- Update to 3.13.10</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.11-1" date="1764936000">- Update to 3.13.11</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.11-2" date="1767700800">- Require at least the same expat version as used during the build time</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.11-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.12-1" date="1770206400">- Update to 3.13.12</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.13.12-2" date="1774526400">- Security fix for CVE-2026-4519 (rhbz#2449729)</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.13-1" date="1775649600">- Update to 3.13.13</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.14-1" date="1781179200">- Update to Python 3.13.14</changelog>
</package>
<package pkgid="1c15447a60268acfb5acd83465fb4903b8dee6517dbaf268e7bdac1fcdf0757a" name="python3.13-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.13.14" rel="1.el10_2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.8-1" date="1759838400">- Update to Python 3.13.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.9-1" date="1760443200">- Update to Python 3.13.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.10-1" date="1764763200">- Update to 3.13.10</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.11-1" date="1764936000">- Update to 3.13.11</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.11-2" date="1767700800">- Require at least the same expat version as used during the build time</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.11-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.12-1" date="1770206400">- Update to 3.13.12</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.13.12-2" date="1774526400">- Security fix for CVE-2026-4519 (rhbz#2449729)</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.13-1" date="1775649600">- Update to 3.13.13</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.14-1" date="1781179200">- Update to Python 3.13.14</changelog>
</package>
<package pkgid="9dc81e83027a2e665c9e0f62054345715af4ce00c158a61db194247fe0fe58ef" name="restic-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.19.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.17.3-2" date="1731931200">- Fix packit config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.3-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
</package>
<package pkgid="381d97d5054ef33c859f977cb96cd52156078d304b6e61c7709ae00c06be6623" name="restic-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.19.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.17.3-2" date="1731931200">- Fix packit config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.3-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
</package>
<package pkgid="3ae17ee9f4d44746256af2ca5da9c66942f3aa3cd12313527b15df38322d1290" name="sandogasa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.11.0" rel="1.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.0-1" date="1776600000">- Initial package; Resolves RHBZ#2459209</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.0-2" date="1776600001">- Remove unneeded BR on rust2rpm-helper</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.1-1" date="1776772800">- Update to version 0.10.1</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.2-1" date="1776945600">- Update to version 0.10.2
- Relax fedrq dependency to Recommends</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.11.0-1" date="1778846400">- Update to version 0.11.0</changelog>
</package>
<package pkgid="bd730f1763622cdeaa8f97a57db13b4529ad5ddfa209b9e99b8bf361ac76056a" name="sandogasa-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.11.0" rel="1.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.0-1" date="1776600000">- Initial package; Resolves RHBZ#2459209</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.0-2" date="1776600001">- Remove unneeded BR on rust2rpm-helper</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.1-1" date="1776772800">- Update to version 0.10.1</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.10.2-1" date="1776945600">- Update to version 0.10.2
- Relax fedrq dependency to Recommends</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.11.0-1" date="1778846400">- Update to version 0.11.0</changelog>
</package>
<package pkgid="e75a4074671b3acd3a81ba5a9997fe925266dd56f64ae22218ae3b489511c0dd" name="singularity-ce-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.4.2" rel="1.el10_2"/>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-1" date="1755777600">- Upgrade to 4.3.3 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-2" date="1756987200">- Use source tarball without squashfuse build artefacts.
  rhbz#2392889</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-3" date="1758283200">- Update License with go_vendor_license report output.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.4-1" date="1761825600">- Upgrade to 4.3.4 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.5-1" date="1764763200">- Upgrade to 4.3.5 upstream version.
- Fixes CVE-2025-64750</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.6-1" date="1766059200">- Upgrade to 4.3.6 upstream version.
- Fixes CVE-2025-67499</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.7-1" date="1768564800">- Upgrade to 4.3.7 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.0-1" date="1772193600">- Upgrade to 4.4.0 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.1-1" date="1774353600">- Upgrade to 4.4.1 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.2-1" date="1781092800">- Upgrade to 4.4.2 upstream version.
- Fix rhbz#2452368
- Fix rhbz#2453084
- Fix rhbz#2455643
- Fix rhbz#2458928
- Fix CVE-2026-47215</changelog>
</package>
<package pkgid="7ec84d845ee7f10e2a66aa755e0e5b277ddf9a3a92215c503f444e7853a8079c" name="sympa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.78" rel="3.el10_2"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.74-1" date="1734350400">- Update to 6.2.74, fix for CVE-2024-55919
  - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.74-1.1" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
</package>
<package pkgid="74ae8136d144860e8bad66315e2cd87cb8e65c0678f9d5e8477522f4bea1adf6" name="sympa-debugsource" arch="ppc64le">
  <version epoch="0" ver="6.2.78" rel="3.el10_2"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.74-1" date="1734350400">- Update to 6.2.74, fix for CVE-2024-55919
  - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.74-1.1" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
</package>
<package pkgid="07d7b5e3e12c701b8adbc77431ee91442c78e193b9d4a2b50711312878c9c826" name="ytree-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.13" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.09-3" date="1721995200">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.10-1" date="1762689600">- update to 2.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-1" date="1777032000">- update to 2.12 fixes rhbz#2459757</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-3" date="1780401600">- update gitignore</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.13-1" date="1781179200">- update to 2.13</changelog>
</package>
<package pkgid="09e8ded887e8f27900cb0a49b595506c2291e5f81f9f637d9a0dec3ef03db6c2" name="ytree-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.13" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.09-3" date="1721995200">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.10-1" date="1762689600">- update to 2.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-1" date="1777032000">- update to 2.12 fixes rhbz#2459757</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-3" date="1780401600">- update gitignore</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.13-1" date="1781179200">- update to 2.13</changelog>
</package>
<package pkgid="84d6476349701531c0dbcb727ee3d188fb94ca8877d00962d79b6d2f75c063ff" name="zerofree-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="17.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-13" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-14" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-15" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-16" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-17" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="ae12c7674ff01e8bcf13b500feac6dfd61d7b843c869fbdab9088bd8da103900" name="zerofree-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="17.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-13" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-14" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-15" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-16" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-17" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
</otherdata>