<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="53">
<package pkgid="45ab5bc30aba5dea622a2cfeb5266f975faa6ce9318bc29a435f8f9f9b0aed9b" name="ansifilter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="7220891750399b1099dbacecbf427e319e95a21db40daa42382fb86fc173b21f" name="ansifilter-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="29f082b0485c844e9e34c783993be75e2cc082832cdb472a17ef8c652d7dd65f" name="ansifilter-gui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="c7177a3a52f328eb02a736a80ef53388968ac294935e793f806768791d49c4ee" name="betterleaks-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.1-1" date="1787054401">- Update to 1.8.1 upstream release
- Resolves: rhbz#2519357</changelog>
</package>
<package pkgid="ec77120ab59242177dd6d6471f8eea1202a8542f7140c9d8256b9a17bf71919b" name="betterleaks-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.1-1" date="1787054401">- Update to 1.8.1 upstream release
- Resolves: rhbz#2519357</changelog>
</package>
<package pkgid="bb8338274018b340325a3692505f31b5f2ce73a96d4dda6c49883ac9dffdfb77" name="bluechi-agent-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="17b5e35d29538c4499b6dbe608b333d349dcdd33c5b2f5b7e49f82384a1ee141" name="bluechi-controller-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="c9e4c8133189ae9448b5f521cb404c93fa4732a1b1670d976c933915672f8544" name="bluechi-ctl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="4833887d3bd89ae8c5d72a33e70d479a930e5b051c5a226ab3820e230e1cd961" name="bluechi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="f6ad5884a11eec5d5f3142f6d45f753c0e86d6a212d984c5f32751d9b5663acb" name="bluechi-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="1a734d31bdf29c57dcb42a34d9e1bf85fd2399a583418e55562674f5afe57be8" name="bluechi-is-online-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="adcd45da42c376178efa275d5d1c335d39c124e32b49d51a6eba1ec693c983b9" name="c-icap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="90be38e784a753ef8a7caeb10f46cc481c4bab9ec57d6955a3a7c79368100621" name="c-icap-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="9a565be6574e3f526950a4eb5968c29f939d608872a18c8b915758506f2e85fe" name="c-icap-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="2ee3ad28620d567e6c1ebf676a5bbc2f822930b227132d1ebbb6dcf4e9e61f85" name="chromium-common-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="8877955f4d1492c12cb1ec7dd759483c96884fa011e08a4ba6f8f83686c28781" name="chromium-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="1edb0561a0655a150d47c9bf157bea566ccd160ecf78b94890d2f3375602a1da" name="chromium-headless-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="898543d1e11b10639cb9ff0df463143adb9e6bba829c1bbf4be8afe76f349f5c" name="chromium-qt5-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="59cce198743735657567abf7c279cce299c237ee3a52ca4a6c1130a58297d405" name="chromium-qt6-ui-debuginfo" arch="ppc64le">
  <version epoch="0" ver="151.0.7922.173" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.71-1" date="1785412800">- Update to 151.0.7922.71
  * CVE-2026-17650: Use after free in Compositing
  * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17652: Use after free in Views
  * CVE-2026-17653: Use after free in Skia
  * CVE-2026-17654: Race in Updater
  * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17656: Use after free in Ozone
  * CVE-2026-17657: Use after free in Navigation
  * CVE-2026-17658: Use after free in V8
  * CVE-2026-17659: Inappropriate implementation in SiteIsolation
  * CVE-2026-17660: Insufficient validation of untrusted input in Network
  * CVE-2026-17661: Use after free in Loader
  * CVE-2026-17662: Insufficient policy enforcement in Prefetch
  * CVE-2026-17663: Insufficient validation of untrusted input in GPU
  * CVE-2026-17664: Insufficient validation of untrusted input in Loader
  * CVE-2026-17665: Use after free in V8
  * CVE-2026-17666: Cryptographic Flaw in Enterprise
  * CVE-2026-17667: Uninitialized Use in ANGLE
  * CVE-2026-17668: Uninitialized Use in ANGLE
  * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17670: Use after free in Views
  * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-17673: Integer overflow in QUIC
  * CVE-2026-17674: Inappropriate implementation in HTML
  * CVE-2026-17675: Out of bounds write in ANGLE
  * CVE-2026-17676: Inappropriate implementation in ANGLE
  * CVE-2026-17677: Inappropriate implementation in ANGLE
  * CVE-2026-17678: Out of bounds read in ANGLE
  * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
  * CVE-2026-17680: Heap buffer overflow in Color
  * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
  * CVE-2026-17682: Integer overflow in ANGLE
  * CVE-2026-17683: Inappropriate implementation in ANGLE
  * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17685: Use after free in Autofill
  * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17687: Type Confusion in ANGLE
  * CVE-2026-17688: Use after free in Input
  * CVE-2026-17689: Uninitialized Use in ANGLE
  * CVE-2026-17690: Insufficient validation of untrusted input in PDF
  * CVE-2026-17691: Out of bounds write in ANGLE
  * CVE-2026-17692: Use after free in DataTransfer
  * CVE-2026-17693: Inappropriate implementation in FileSystem
  * CVE-2026-17694: Use after free in DOM
  * CVE-2026-17695: Inappropriate implementation in ANGLE
  * CVE-2026-17696: Side-channel information leakage in Media
  * CVE-2026-17697: Type Confusion in ANGLE
  * CVE-2026-17698: Insufficient validation of untrusted input in UI
  * CVE-2026-17699: Use after free in Views
  * CVE-2026-17700: Insufficient validation of untrusted input in Actor
  * CVE-2026-17701: Out of bounds read in ANGLE
  * CVE-2026-17702: Inappropriate implementation in Skia
  * CVE-2026-17703: Policy bypass in Chrome for iOS
  * CVE-2026-17704: Use after free in ANGLE
  * CVE-2026-17705: Integer overflow in libxml
  * CVE-2026-17706: Insufficient validation of untrusted input in Media
  * CVE-2026-17707: Uninitialized Use in Media
  * CVE-2026-17708: Use after free in Audio
  * CVE-2026-17709: Race in Downloads
  * CVE-2026-17710: Inappropriate implementation in MHTML
  * CVE-2026-17711: Race in Downloads
  * CVE-2026-17712: Race in Skia
  * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-17714: Uninitialized Use in ANGLE
  * CVE-2026-17715: Inappropriate implementation in Passwords
  * CVE-2026-17716: Use after free in Updater
  * CVE-2026-17717: Integer overflow in ANGLE
  * CVE-2026-17718: Use after free in ANGLE
  * CVE-2026-17719: Use after free in Input
  * CVE-2026-17720: Insufficient policy enforcement in Passwords
  * CVE-2026-17721: Out of bounds write in ANGLE
  * CVE-2026-17722: Object lifecycle issue in WebView
  * CVE-2026-17723: Use after free in Media
  * CVE-2026-17724: Race in Chrome for iOS
  * CVE-2026-17725: Type Confusion in V8
  * CVE-2026-17726: Integer overflow in WebGL
  * CVE-2026-17727: Out of bounds write in WebGL
  * CVE-2026-17728: Inappropriate implementation in Extensions
  * CVE-2026-17758: Heap buffer overflow in Dawn
  * CVE-2026-17732: Inappropriate implementation in SVG
  * CVE-2026-17729: Use after free in V8
  * CVE-2026-17730: Side-channel information leakage in Autofill
  * CVE-2026-17731: Inappropriate implementation in Autofill
  * CVE-2026-17733: Inappropriate implementation in QUIC
  * CVE-2026-17734: Inappropriate implementation in Autofill
  * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
  * CVE-2026-17736: Insufficient validation of untrusted input in WebView
  * CVE-2026-17737: Use after free in Bluetooth
  * CVE-2026-17738: Insufficient validation of untrusted input in Payments
  * CVE-2026-17739: Insufficient policy enforcement in Extensions
  * CVE-2026-17740: Uninitialized Use in ANGLE
  * CVE-2026-17741: Insufficient validation of untrusted input in WebView
  * CVE-2026-17742: Insufficient policy enforcement in Payments
  * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
  * CVE-2026-17744: Inappropriate implementation in File Input
  * CVE-2026-17745: Out of bounds read in Skia
  * CVE-2026-17746: Use after free in GPU
  * CVE-2026-17747: Insufficient validation of untrusted input in Payments
  * CVE-2026-17748: Inappropriate implementation in Extensions
  * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17750: Use after free in ANGLE
  * CVE-2026-17751: Inappropriate implementation in AdFilter
  * CVE-2026-17752: Use after free in Views
  * CVE-2026-17753: Inappropriate implementation in Autofill
  * CVE-2026-17754: Inappropriate implementation in Blink
  * CVE-2026-17755: Incorrect security UI in Extensions
  * CVE-2026-17756: Insufficient policy enforcement in Presentation
  * CVE-2026-17757: Uninitialized Use in Skia
  * CVE-2026-17759: Uninitialized Use in Codecs
  * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
  * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17763: Inappropriate implementation in GPU
  * CVE-2026-17764: Inappropriate implementation in FedCM
  * CVE-2026-17765: Inappropriate implementation in WebProtect
  * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
  * CVE-2026-17767: Insufficient validation of untrusted input in WebView
  * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
  * CVE-2026-17769: Insufficient validation of untrusted input in Cast
  * CVE-2026-17770: Out of bounds read in Media
  * CVE-2026-17771: Uninitialized Use in Skia
  * CVE-2026-17772: Out of bounds read in WebGL
  * CVE-2026-17773: Insufficient validation of untrusted input in Cast
  * CVE-2026-17774: Insufficient validation of untrusted input in Variations
  * CVE-2026-17775: Inappropriate implementation in PresentationAPI
  * CVE-2026-17776: Policy bypass in Receiver
  * CVE-2026-17777: Inappropriate implementation in Autofill
  * CVE-2026-17778: Use after free in Extensions
  * CVE-2026-17779: Inappropriate implementation in Site Isolation
  * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-17781: Inappropriate implementation in Extensions
  * CVE-2026-17782: Incorrect security UI in Chrome for iOS
  * CVE-2026-17783: Inappropriate implementation in Loader
  * CVE-2026-17784: Use after free in Audio
  * CVE-2026-17785: Uninitialized Use in ANGLE
  * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17787: Inappropriate implementation in DevTools
  * CVE-2026-17788: Inappropriate implementation in Blink
  * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17790: Uninitialized Use in ANGLE
  * CVE-2026-17791: Insufficient validation of untrusted input in Payments
  * CVE-2026-17792: Inappropriate implementation in Credential Management
  * CVE-2026-17793: Inappropriate implementation in Messages
  * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
  * CVE-2026-17796: Side-channel information leakage in WebXR
  * CVE-2026-17797: Inappropriate implementation in CSS
  * CVE-2026-17798: Inappropriate implementation in Cast
  * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2026-17800: Side-channel information leakage in MediaRecording
  * CVE-2026-17801: Out of bounds memory access in ANGLE
  * CVE-2026-17802: Side-channel information leakage in GPU
  * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
  * CVE-2026-17804: Use after free in Media
  * CVE-2026-17805: Insufficient policy enforcement in Glic
  * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17807: Use after free in V8
  * CVE-2026-17808: Uninitialized Use in WebGL
  * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17810: Uninitialized Use in Dawn
  * CVE-2026-17811: Use after free in ANGLE
  * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
  * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-17815: Insufficient policy enforcement in GuestView
  * CVE-2026-17816: Inappropriate implementation in Speech
  * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
  * CVE-2026-17818: Inappropriate implementation in Network
  * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
  * CVE-2026-17820: Insufficient policy enforcement in Autofill
  * CVE-2026-17821: Insufficient policy enforcement in Extensions
  * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17823: Insufficient policy enforcement in WebXR
  * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-17825: Insufficient policy enforcement in Passwords
  * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17827: Inappropriate implementation in CSS
  * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17829: Insufficient policy enforcement in Passwords
  * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17832: Use after free in ANGLE
  * CVE-2026-17833: Inappropriate implementation in Passwords
  * CVE-2026-17834: Inappropriate implementation in Passwords
  * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17836: Use after free in V8
  * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17838: Incorrect security UI in Chrome for iOS
  * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17840: Incorrect security UI in Passwords
  * CVE-2026-17841: Race in Chrome for iOS
  * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17843: Inappropriate implementation in CSS
  * CVE-2026-17844: Insufficient validation of untrusted input in Cast
  * CVE-2026-17845: Inappropriate implementation in CSS
  * CVE-2026-17846: Inappropriate implementation in Media
  * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
  * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17850: Inappropriate implementation in Permissions
  * CVE-2026-17851: Side-channel information leakage in Autofill
  * CVE-2026-17852: Inappropriate implementation in Media Router
  * CVE-2026-17853: Inappropriate implementation in DevTools
  * CVE-2026-17854: Insufficient policy enforcement in WebMCP
  * CVE-2026-17855: Race in DevTools
  * CVE-2026-17856: Inappropriate implementation in Network
  * CVE-2026-17857: Inappropriate implementation in Network
  * CVE-2026-17858: Uninitialized Use in WebNN
  * CVE-2026-17859: Side-channel information leakage in Favicons
  * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
  * CVE-2026-17861: Insufficient validation of untrusted input in Updater
  * CVE-2026-17862: Use after free in Tracing
  * CVE-2026-17863: Inappropriate implementation in Browser
  * CVE-2026-17864: Inappropriate implementation in Updater
  * CVE-2026-17865: Inappropriate implementation in Crypto
  * CVE-2026-17866: Type Confusion in Tab
  * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
  * CVE-2026-17868: Insufficient policy enforcement in USB
  * CVE-2026-17869: Out of bounds read in WebXR
  * CVE-2026-17870: Insufficient validation of untrusted input in Cast
  * CVE-2026-17871: Inappropriate implementation in Passwords
  * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
  * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17875: Use after free in PDFium
  * CVE-2026-17876: Inappropriate implementation in Payments
  * CVE-2026-17877: Inappropriate implementation in Chromoting
  * CVE-2026-17878: Inappropriate implementation in CSS
  * CVE-2026-17879: Inappropriate implementation in Autofill
  * CVE-2026-17880: Inappropriate implementation in Autofill
  * CVE-2026-17881: Use after free in WebXR
  * CVE-2026-17882: Policy bypass in Extensions
  * CVE-2026-17883: Inappropriate implementation in Headless
  * CVE-2026-17884: Object lifecycle issue in WebRTC
  * CVE-2026-17885: Inappropriate implementation in Paint
  * CVE-2026-17886: Use after free in Enterprise
  * CVE-2026-17887: Use after free in TabStrip
  * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
  * CVE-2026-17889: Uninitialized Use in WebXR
  * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17891: Use after free in ANGLE
  * CVE-2026-17892: Inappropriate implementation in WebXR
  * CVE-2026-17893: Insufficient validation of untrusted input in Updater
  * CVE-2026-17894: Use after free in Views
  * CVE-2026-17895: Inappropriate implementation in DataTransfer
  * CVE-2026-17896: Use after free in DevTools
  * CVE-2026-17897: Inappropriate implementation in ORB
  * CVE-2026-17898: Use after free in DevTools
  * CVE-2026-17899: Insufficient policy enforcement in DevTools
  * CVE-2026-17900: Inappropriate implementation in Enterprise
  * CVE-2026-17901: Inappropriate implementation in Sharing
  * CVE-2026-17902: Inappropriate implementation in Editing
  * CVE-2026-17903: Insufficient policy enforcement in Chromecast
  * CVE-2026-17904: Insufficient policy enforcement in NFC
  * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
  * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
  * CVE-2026-17907: Side-channel information leakage in Network
  * CVE-2026-17908: Insufficient validation of untrusted input in Printing
  * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
  * CVE-2026-17910: Insufficient policy enforcement in NFC
  * CVE-2026-17911: Insufficient policy enforcement in SVG
  * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17914: Side-channel information leakage in Skia
  * CVE-2026-17915: Inappropriate implementation in WebView
  * CVE-2026-17916: Insufficient policy enforcement in Settings
  * CVE-2026-17917: Policy bypass in Chrome for iOS
  * CVE-2026-17918: Use after free in Sync
  * CVE-2026-17919: Insufficient policy enforcement in Enterprise
  * CVE-2026-17920: Use after free in V8
  * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17922: Inappropriate implementation in Enterprise
  * CVE-2026-17923: Policy bypass in Enterprise
  * CVE-2026-17924: Use after free in DNS
  * CVE-2026-17925: Inappropriate implementation in Cast
  * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17927: Insufficient policy enforcement in DevTools
  * CVE-2026-17928: Inappropriate implementation in DataTransfer
  * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
  * CVE-2026-17931: Inappropriate implementation in DevTools
  * CVE-2026-17932: Use after free in DataTransfer
  * CVE-2026-17933: Inappropriate implementation in DOMStorage
  * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
  * CVE-2026-17935: Heap buffer overflow in Codecs
  * CVE-2026-17936: Inappropriate implementation in DevTools
  * CVE-2026-17937: Inappropriate implementation in DevTools
  * CVE-2026-17938: Inappropriate implementation in FullScreen
  * CVE-2026-17939: Inappropriate implementation in Passwords
  * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
  * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17942: Side-channel information leakage in SVG
  * CVE-2026-17943: Inappropriate implementation in Parser
  * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17945: Inappropriate implementation in Navigation
  * CVE-2026-17946: Uninitialized Use in Dawn
  * CVE-2026-17947: Use after free in WebSockets
  * CVE-2026-17948: Type Confusion in V8
  * CVE-2026-17949: Uninitialized Use in GPU
  * CVE-2026-17950: Policy bypass in Safebrowsing
  * CVE-2026-17951: Heap buffer overflow in WebRTC
  * CVE-2026-17952: Inappropriate implementation in V8
  * CVE-2026-17953: Insufficient policy enforcement in WebView
  * CVE-2026-17954: Policy bypass in MHTML
  * CVE-2026-17955: Insufficient validation of untrusted input in Payments
  * CVE-2026-17956: Inappropriate implementation in Scheduling
  * CVE-2026-17957: Inappropriate implementation in CORS
  * CVE-2026-17958: Inappropriate implementation in Views
  * CVE-2026-17959: Inappropriate implementation in Network
  * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17961: Inappropriate implementation in Session
  * CVE-2026-17962: Inappropriate implementation in Blink
  * CVE-2026-17963: Inappropriate implementation in SVG
  * CVE-2026-17964: Incorrect security UI in UI
  * CVE-2026-17965: Incorrect security UI in Chrome for iOS
  * CVE-2026-17966: Inappropriate implementation in Views
  * CVE-2026-17967: Use after free in Chrome for iOS
  * CVE-2026-17968: Uninitialized Use in WebXR
  * CVE-2026-17969: Inappropriate implementation in Passwords
  * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
  * CVE-2026-17971: Inappropriate implementation in Frame
  * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
  * CVE-2026-17973: Inappropriate implementation in Views
  * CVE-2026-17974: Insufficient policy enforcement in DevTools
  * CVE-2026-17975: Inappropriate implementation in IME
  * CVE-2026-17976: Policy bypass in Extensions
  * CVE-2026-17977: Policy bypass in CSS
  * CVE-2026-17978: Side-channel information leakage in WebCodecs
  * CVE-2026-17979: Race in V8
  * CVE-2026-17980: Inappropriate implementation in UI
  * CVE-2026-17981: Inappropriate implementation in Blink
  * CVE-2026-17982: Insufficient validation of untrusted input in Cast
  * CVE-2026-17983: Incorrect security UI in Global Media Controls
  * CVE-2026-17984: Inappropriate implementation in Browser
  * CVE-2026-17985: Insufficient policy enforcement in Speech
  * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
  * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
  * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
  * CVE-2026-17989: Type Confusion in V8
  * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
  * CVE-2026-17991: Insufficient validation of untrusted input in AI
  * CVE-2026-17992: Uninitialized Use in Skia
  * CVE-2026-17993: Race in Updater
  * CVE-2026-17994: Inappropriate implementation in Media
  * CVE-2026-17995: Out of bounds read in Dawn
  * CVE-2026-17996: Inappropriate implementation in Browser
  * CVE-2026-17997: Inappropriate implementation in Passwords
  * CVE-2026-17998: Incorrect security UI in Extensions
  * CVE-2026-17999: Incorrect security UI in PictureInPicture
  * CVE-2026-18000: Insufficient policy enforcement in USB
  * CVE-2026-18001: Inappropriate implementation in WebGL
  * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
  * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18004: Insufficient policy enforcement in Speech
  * CVE-2026-18005: Inappropriate implementation in WebXR
  * CVE-2026-18006: Inappropriate implementation in Google Lens
  * CVE-2026-18007: Inappropriate implementation in Input
  * CVE-2026-18008: Inappropriate implementation in Settings
  * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
  * CVE-2026-18010: Inappropriate implementation in Passwords
  * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18012: Use after free in PDFium
  * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
  * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
  * CVE-2026-18015: Inappropriate implementation in Tint
  * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-18017: Use after free in Dawn
  * CVE-2026-18018: Inappropriate implementation in Updater
  * CVE-2026-18019: Side-channel information leakage in Media</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.108-1" date="1786104000">- Update to 151.0.7922.108
  * CVE-2026-19137: Use after free in WebGL
  * CVE-2026-19138: Heap buffer overflow in CrashReporting
  * CVE-2026-19139: Race in CredentialProvider
  * CVE-2026-19140: Use after free in GPU
  * CVE-2026-19141: Use after free in Resources
  * CVE-2026-19142: Use after free in Views
  * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
  * CVE-2026-19144: Use after free in HTML
  * CVE-2026-19145: Use after free in Translate
  * CVE-2026-19146: Uninitialized Use in GPU
  * CVE-2026-19147: Use after free in Aura
  * CVE-2026-19148: Out of bounds write in GPU
  * CVE-2026-19149: Use after free in Aura
  * CVE-2026-19150: Inappropriate implementation in V8
  * CVE-2026-19151: Use after free in V8
  * CVE-2026-19152: Inappropriate implementation in Navigation
  * CVE-2026-19153: Insufficient validation of untrusted input in Workers
  * CVE-2026-19154: Use after free in Skia
  * CVE-2026-19155: Use after free in Payments
  * CVE-2026-19156: Heap buffer overflow in Base
  * CVE-2026-19157: Out of bounds write in ANGLE
  * CVE-2026-19158: Use after free in Views
  * CVE-2026-19159: Use after free in Views
  * CVE-2026-19160: Uninitialized Use in Skia
  * CVE-2026-19161: Uninitialized Use in Skia
  * CVE-2026-19162: Out of bounds write in V8
  * CVE-2026-19163: Use after free in Media
  * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
  * CVE-2026-19165: Use after free in Extensions
  * CVE-2026-19166: Use after free in Web Authentication
  * CVE-2026-19167: Integer overflow in GPU
  * CVE-2026-19168: Inappropriate implementation in V8
  * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
  * CVE-2026-19170: Use after free in WebGL
  * CVE-2026-19171: Use after free in Media
  * CVE-2026-19172: Use after free in Views
  * CVE-2026-19173: Out of bounds write in Skia
  * CVE-2026-19174: Integer overflow in V8
  * CVE-2026-19175: Use after free in Payments
  * CVE-2026-19176: Use after free in Skia
  * CVE-2026-19177: Insufficient validation of untrusted input in UI</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.137-1" date="1786536000">- Update to 151.0.7922.137
  * CVE-2026-19556: Use after free in V8
  * CVE-2026-19557: Use after free in TabStrip
  * CVE-2026-19558: Use after free in Extensions
  * CVE-2026-19559: Use after free in HTML
  * CVE-2026-19560: Use after free in Blink</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.169-1" date="1787227200">- Update to 151.0.7922.169
  * CVE-2026-76034: Buffer overflow in WebGL
  * CVE-2026-76036: Buffer overflow in Dawn
  * CVE-2026-76033: Inappropriate implementation in CORS
  * CVE-2026-76037: Link following in CredentialProvider
  * CVE-2026-76044: Race condition in USB
  * CVE-2026-76039: Incorrect reference resolution in Core
  * CVE-2026-76040: Use after free in Browser
  * CVE-2026-76035: Inappropriate implementation in Media
  * CVE-2026-76042: Use of uninitialized resource in GPU
  * CVE-2026-76046: Buffer overflow in ANGLE
  * CVE-2026-76043: Incorrect calculation in V8
  * CVE-2026-76041: Information leak in Skia
  * CVE-2026-76047: Type confusion in V8
  * CVE-2026-76038: Type confusion in V8
  * CVE-2026-76045: Use after free in WebGL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 151.0.7922.173-1" date="1787572800">- Update to 151.0.7922.173
  * CVE-2026-76017: Use after free in Chromoting
  * CVE-2026-76018: Privilege elevation in Import
  * CVE-2026-76019: Incorrect authorization in Workers
  * CVE-2026-76020: Race condition in V8
  * CVE-2026-76021: Use after free in DOM
  * CVE-2026-76022: Buffer overflow in Network
  * CVE-2026-76023: Improper resource control in Linux Toolkit Theming</changelog>
</package>
<package pkgid="73bb31ed84caa9ba9ff8cd85e66617b4ced0e414626c229a17821d0859e6289e" name="clamav-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="b87dfed7959ae7ba072cf74e837daa933722cb2c19bf346c21a679a90b2eb754" name="clamav-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="aa1b3d631303af27e763bcf414d6817de081f27ba5d96ccbb2354b3694b1b972" name="clamav-freshclam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="1b468d288fc4622dd0f089f2a2e797b4b14d1e36fb7bb900ee5c9510392c2e2b" name="clamav-lib-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="18a8b8c68f051902f46c38f65ce5a66797db11fb70f2426600dbfcbcbf6b65f7" name="clamav-milter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="e7f6ca6e9a2c25043ff7975672e97bc6e13b09931424a932e2b434254e4233fc" name="clamd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="1974aa6df09b5b7784cab1b7a075251d1a9fcf05e8d68f10f0918990a8c27cbc" name="glab-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.114.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.104.0-1" date="1782216000">- Update to 1.104.0 upstream release
- Resolves: rhbz#2491693</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.106.0-1" date="1782820800">- Update to 1.106.0 upstream release
- Resolves: rhbz#2491958</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.106.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.109.0-1" date="1784635200">- Update to 1.109.0 upstream release
- Resolves: rhbz#2497701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.112.0-1" date="1785844800">- Update to 1.112.0 upstream release
- Resolves: rhbz#2510985</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.114.0-1" date="1787054400">- Update to 1.114.0 upstream release
- Resolves: rhbz#2517911</changelog>
</package>
<package pkgid="30454300e8334df24b604b404e554c44efce857ecf80153f6a4c462698e568cb" name="glab-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.114.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.104.0-1" date="1782216000">- Update to 1.104.0 upstream release
- Resolves: rhbz#2491693</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.106.0-1" date="1782820800">- Update to 1.106.0 upstream release
- Resolves: rhbz#2491958</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.106.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.109.0-1" date="1784635200">- Update to 1.109.0 upstream release
- Resolves: rhbz#2497701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.112.0-1" date="1785844800">- Update to 1.112.0 upstream release
- Resolves: rhbz#2510985</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.114.0-1" date="1787054400">- Update to 1.114.0 upstream release
- Resolves: rhbz#2517911</changelog>
</package>
<package pkgid="7a8b0efcc2bc5783f522cd87f4698f466fafa2403eb1ce8ff3877465fc20bda2" name="gn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="7c04a25dd07f014a68f130f94e22bc73859578bf7407618d8f59e4f5aa0c51c9" name="gn-debugsource" arch="ppc64le">
  <version epoch="0" ver="2517^20260817.e8a8e0932a5e" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2409^20260602.6f8c0328ee29-1" date="1780401600">- Update to version 2409</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2413^20260614.28df2d93df29-1" date="1781438400">- Update to version 2413</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2423^20260621.c276f01685bc-1" date="1782043200">- Update to version 2423</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-1" date="1782820800">- Update to version 2437
- Correct and improve License expressions and license text file handling
- Deal with upstream vendoring of a header from the Rust cxx crate
- Invoke ninja via the %ninja_build macro</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2437^20260630.5223a47630df-2" date="1785672000">- Unbundle the header from `crate(cxx)` in `%conf`, not `%prep`</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2455^20260707.127c7783a834-1" date="1785672001">- Update to version 2455</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2459^20260708.8d35b83847d1-1" date="1785672002">- Update to version 2459</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2501^20260731.3fd3b0624d8c-1" date="1785672003">- Update to version 2501</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2509^20260808.64cfb8344ec3-1" date="1786276800">- Update to version 2509</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2517^20260817.e8a8e0932a5e-1" date="1786968000">- Update to version 2517</changelog>
</package>
<package pkgid="9adebc5d4a77d15e8e63ee7cd0991a221ff8ea687c820b8f6b7d074be01c6799" name="jigdo-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="9.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="e27fa1ae32f25d56b66888dededb0f53a1a8fd22e4d6e2aeb4c7bf3524b39bfa" name="jigdo-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="9.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="a731a4c72242e928e5f07ffc292daea45186af20eab3ba8152f9c61ff95aa8b4" name="openbao-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="8abfa20bdd77af0410537f41f8beaba15885189338fc2dbe2bfb900446ebdcac" name="openbao-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="0d27d93b305c01ee05ce5fbd101bacabbea42a3437bf2e3c8e5b36d77b646a22" name="opkssh-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="6df8cb454ac479908fb4eef9e53857fc55ec8ece6108bb743f5f9c01aa22ed19" name="opkssh-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.16.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="23acc85afd8a0c83e2ea74f3111bd0ada46b37806295c10c8271269a44323bff" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="2831f4603742c76ae27f21f44ae671c2e578b59b4e9085f7f90f9bdb5cc571c9" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="20e0ce10044436c8c6ba3a49b547d8ac1d768146ed7273a5b95a6cea0b95f2f3" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="ecfa5e24791a239a82ad6dd1aeefd3780d2f5b51dd5c43717fe53b23da9bd1e1" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="993fe0e3ce3449eb43cd898a655a3b42be766459e698d428e8f3ef43b95f39b9" name="proftpd-postgresql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="0febf1d7db5ffa219086549c4f6945439086011324b02752c5f8e77eb8e0baab" name="proftpd-proxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="b73d923f3aba956b85b9a59720c0943bb3e7fcd9091730304e1e72791dfc742d" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="27fb51bf157bde56ea786b5f97940ba34ef70cf786aa6cedd38436c592245315" name="proftpd-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.9d" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
</package>
<package pkgid="659cf8f8eef3a64d5a4ad4776a0669981feb6722d13e7c954cc9b113922b1cae" name="pyscard-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="107b35d162d1d4f62cb4a98eeca7c478ac7a46c033c51be576f405fcf79b9b10" name="python3-pyscard-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="c98d5612f4e0303b51fbcff85e721de95124840e8e98c2bd95d889a6b9d669f9" name="rdiff-backup-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.2.6" rel="17.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="c1a063a0b66011d3eed648b20e29229bc3c0e0ce3cdc649c325aa94d7c45fe11" name="rdiff-backup-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.2.6" rel="17.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-8" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-9" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-10" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-13" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-14" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.6-15" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.6-16" date="1784721600">- Rebuilt for Python 3.15.0b4 ABI change</changelog>
  <changelog author="Python Maint &lt;frank@crawford.emu.id.au&gt; - 2.2.6-17" date="1786968000">- Migrate spec file to pyproject macros - BZ2378431</changelog>
</package>
<package pkgid="2a95aa412b8e996f94e069d831140b11c66921bc07074bc3f206be11785d93ba" name="rpki-client-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.9" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="8c717b0e5f37b61cf044f7e506a61fa26019f83bfef6a7f96df0b243e80defed" name="rpki-client-debugsource" arch="ppc64le">
  <version epoch="0" ver="9.9" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="c017258ea7ae8222a65be9b646ae68986bd844c5c1a9b51154315af2e3764aac" name="sympa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.80" rel="1.el10_2"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="3671f64208b3b53e5ccf5034caf1d616c6c8ca57a26afc98bcdb6c4764413f65" name="sympa-debugsource" arch="ppc64le">
  <version epoch="0" ver="6.2.80" rel="1.el10_2"/>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.76-1" date="1738670400">- Update to 6.2.76</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 6.2.76-1.1" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 6.2.76-1.3" date="1753704000">- Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
  so perl-DBD-MySQL no longer builds it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.76-1.4" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-1" date="1774958400">- Update to 6.2.78
- Turn conf sub-packages to noarch
- Disable some SUID wrappers
- Drop now useless cookie parameter creation on first install
- Simplify initial conf creation
- Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 6.2.78-2" date="1779883200">- Unbundle FontAwesome on all Fedora releases</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.78-3" date="1781092800">- Add upstream patch to fix old style CLI
- Update URL:</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.78-3.1" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Xavier Bachelot &lt;xavier@bachelot.org&gt; - 6.2.80-1" date="1786881600">- Update to 6.2.80 (RHBZ#2515968)</changelog>
</package>
<package pkgid="4b0ea33b7af674ba3b9d3216cfb3d8d52ac172222596e1ea10f1db99b98344d4" name="tin-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.6" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
<package pkgid="bb14ceaf948780168240ec1e5839ebdb1d171be65a1f549b257715975e83f496" name="tin-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.6.6" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
</otherdata>