<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="96">
<package pkgid="089d68cdc805f30852008fb6f3eef60a578d2a5c37eda92eba215c46c2594c53" name="apptainer-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="d8701b47050e0e4a3b718b2b5f2b99b4043a1de5a772eac2ab51890fbdc89360" name="apptainer-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="b3363381ff785fb49dbb6e2c7b355f1a7c1c20eca4a14fb9bf0f0df09343c7c4" name="apptainer-suid-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="15e5f059eab9324cb0b0123e16cfc0b8426f6871c624c2b6700d3c4f2679007b" name="baresip-aac-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="1547870297eaabe4dca0285f8e00d0b8545be6672d9627273a27817b95bc1678" name="baresip-alsa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="b56b40c18d1725219bcf4844108a13c5c6d7cd5bd7f4c504aa39e5532b2fadbd" name="baresip-av1-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="75211b4f6744738e143391185bc0ed9e7dd6a1492eff51427bd911cbaa465af1" name="baresip-avcodec-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="45f20bc14042556740a599b9925e1b881deb21cdd2833c548f8f1ec25976b1d6" name="baresip-avfilter-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="0568bd7cbe21f518dbc04bd1a57b09f5bf7e0db88903ad66565b4b79a0dc9613" name="baresip-avformat-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="52002f566446124412ca78735a82024f4617ee8fb9417b14c0dc196c3cc8e9d4" name="baresip-codec2-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="c4d3aee9f4768899fcb9d83287fe4bff59300c5928dd94551e26182dffbb2f25" name="baresip-ctrl_dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="18affe64848b07dcec81465903181ce0096e3626b5c846b36629804d107b7acd" name="baresip-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="1e8b649e3277b09b4f7a8e6f5e6127b685f6319eef5569c5f107c1e88d9d45b9" name="baresip-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="ef9223dd900030490f275c7795b9bdc850bc07621703898bfa68aaf04c6f9688" name="baresip-g722-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="724e09949b64fe099154006033f2387f0093745bbc2a23bdc9b26299e835d5d6" name="baresip-gst-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="85b60f43864f358beeb6265cd1f6f0438a5f9219394e8d70f43d434ea91ed596" name="baresip-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="7ff079eb9e8f0fdff942ef4e7a6cd9771eb667e2f8331867f7c55661f96237ed" name="baresip-jack-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="8e351054886d520d93b35a7467902f5e2776766e920e31360229602b92fa9ff1" name="baresip-mqtt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="87eb1005c92ff3bb730d36629dbf809b2a44e4314ee26475bb8a2f9e421559d4" name="baresip-opus-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="69885ab673cea45ea9bff4d9025e79bea0a603e23f14c5b42da5d42ff79904ae" name="baresip-pipewire-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="84b60d0cca8fb129f3ca343e1600342baf4f1f9df87c46d6979065a39d49e2dd" name="baresip-plc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="3ec798f14949981b75dad8048ef82b6367b4881441f4b0dddb9fa5435eaeaabb" name="baresip-portaudio-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="58528a6869534e633c1b876b5a3b84b860beb37fa6f739b65e46aba3968843dd" name="baresip-pulse-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="9fe06b5a3d0a2bc7395598365a289a094ad140f117f4d9732fe565a063c53c30" name="baresip-sdl-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="0919e6e41ef531fce0b5cf05998f355dda87f2966b6182d61f9c008afa8e0952" name="baresip-snapshot-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="0eb5584b81854f2b8aec38930024b0871b5319040f47d3ea8764424c04b2786e" name="baresip-sndfile-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="184fc5e5d4098eea5a30d8e4efde9a41efa2f82de348a258159351432e4b90f4" name="baresip-swscale-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="ce48fb3d94487329cdd68511ed2acfb4290c01dd1082b72fc4ad26bf8f32d0e3" name="baresip-v4l2-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="e46e16a765a44e1e2ab8013ccd426f82104689a2824f59e74a363bdbe8102963" name="baresip-vp8-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="ab5608e533cf3209683574d1632de051211d5104f4e27173c7ef7451d392eab6" name="baresip-vp9-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="3b085b2f294f0e3e268b434798478b5ff35ff85fce1f2821575e37d26c652d0e" name="baresip-x11-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770552000">- Upgrade to 4.5.0 (#2433734)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444323)</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 4.6.0-2" date="1773921600">- Rebuilt for libvpx-1.6.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455864)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476966)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.0-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489789)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506052)</changelog>
</package>
<package pkgid="9639313404504ea60be02a65fb05cb0ace26c9fea37f94d464b9e876e11930ba" name="betterleaks-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="2.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
</package>
<package pkgid="7cd0dbf3df6dcf13d69135ec79541154d7c53483cd3262e021d8dd4c2f4f4084" name="betterleaks-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="2.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
</package>
<package pkgid="82f7ee94f37b1f201fa70bbc510f7e71297dba9f2380a1f1aba6ffbaaf430754" name="bitcoin-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="ed4d419481b94b449e25f2ccd8ff07b6b9b13a3bdd83e8c5708a3f6e71da7801" name="bitcoin-core-debugsource" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="3076e077b5f66d9d63a4536f572353dd92f7d99fd16ef7b1703f785edd34769d" name="bitcoin-core-desktop-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="40775f3d080da233ac1fc3cf9fea4fb2cf99bbf4ba83aa0ccadac8c1e57d521a" name="bitcoin-core-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="3c67e0962d0fd29a3dc16e058531552286d82ceb2c9bb42cf7c3068dc8adc412" name="bitcoin-core-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="a0d902d9ef28ae03c52f1ef34db0bace391e03fd5d948b720c1202101531423c" name="borgbackup-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.1-1" date="1745064000">- update to 1.4.1</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.3-1" date="1764763200">- update to 1.4.3</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.4-1" date="1774785600">- update to 1.4.4
- remove unnecessary build dependency on python-dateutil</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.5-1" date="1784980800">- update to 1.4.5</changelog>
</package>
<package pkgid="596a855a891d25c4bae9a66b699fffd3fb08d7c0515417a5a2313b0c7d224459" name="borgbackup-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.1-1" date="1745064000">- update to 1.4.1</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.3-1" date="1764763200">- update to 1.4.3</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.4-1" date="1774785600">- update to 1.4.4
- remove unnecessary build dependency on python-dateutil</changelog>
  <changelog author="Felix Schwarz &lt;fschwarz@fedoraproject.org&gt; - 1.4.5-1" date="1784980800">- update to 1.4.5</changelog>
</package>
<package pkgid="dfe57bee7eb443a493b468c670a8be2135245c6ce1fab5c873c48270da9b1e5e" name="chromium-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="150.0.7871.186" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
</package>
<package pkgid="8540a3ccf3c96b9fb2a39b57d95f1f86f892ad1e45b7d48744deb055daa4b3a3" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="150.0.7871.186" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
</package>
<package pkgid="1d04d48d9a13b560d9091534993a9523a1cab087eb4dbf71ed04628f8933b1f2" name="chromium-headless-debuginfo" arch="x86_64">
  <version epoch="0" ver="150.0.7871.186" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
</package>
<package pkgid="d2b74caee5ad82755ae54b9bfb21ed94cb789139e620a3841b2dc78d84be9466" name="chromium-qt5-ui-debuginfo" arch="x86_64">
  <version epoch="0" ver="150.0.7871.186" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
</package>
<package pkgid="a6a04ba9192935ad21a5a3e089c371b91f4469c30ad67f5b71dc1c9e2e4499f5" name="chromium-qt6-ui-debuginfo" arch="x86_64">
  <version epoch="0" ver="150.0.7871.186" rel="1.el10_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.196-1" date="1782302400">- Update to 149.0.7827.196
  * CVE-2026-13028: Use after free in WebGL
  * CVE-2026-13032: Use after free in WebGL
  * CVE-2026-13033: Out of bounds read in Blink&gt;InterestGroups
  * CVE-2026-13038: Use after free in Autofill
  * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
  * CVE-2026-13022: Inappropriate implementation in Autofill
  * CVE-2026-13023: Uninitialized Use in GPU
  * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
  * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13026: Use after free in Digital Credentials
  * CVE-2026-13027: Use after free in FileSystem
  * CVE-2026-13029: Use after free in Web Authentication
  * CVE-2026-13030: Uninitialized Use in GPU
  * CVE-2026-13031: Use after free in Blink
  * CVE-2026-13034: Inappropriate implementation in Passwords
  * CVE-2026-13035: Use after free in Bluetooth
  * CVE-2026-13036: Use after free in Blink
  * CVE-2026-13037: Use after free in WebView
- Upstream patch, Make dark mode apply filter to images irrespective of layout zoom</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 149.0.7827.200-1" date="1782475200">- Update to 149.0.7827.200
   CVE-2026-13281: Integer overflow in Mojo
   CVE-2026-13282: Use after free in Payments
   CVE-2026-13283: Use after free in AdFilter</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.46-1" date="1782907200">- Update to 150.0.7871.46
  * CVE-2026-13774: Use after free in Extensions
  * CVE-2026-13775: Use after free in GPU
  * CVE-2026-13776: Type Confusion in Dawn
  * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
  * CVE-2026-13778: Use after free in WebUSB
  * CVE-2026-13779: Use after free in Chromoting
  * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13781: Insufficient validation of untrusted input in Skia
  * CVE-2026-13782: Use after free in Browser
  * CVE-2026-13783: Use after free in Views
  * CVE-2026-13784: Use after free in Views
  * CVE-2026-13785: Use after free in Bluetooth
  * CVE-2026-13786: Use after free in Ozone
  * CVE-2026-13787: Use after free in Chromoting
  * CVE-2026-13788: Use after free in Fullscreen
  * CVE-2026-13789: Use after free in GPU
  * CVE-2026-13790: Side-channel information leakage in Scroll
  * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
  * CVE-2026-13792: Use after free in Touchbar
  * CVE-2026-13793: Insufficient policy enforcement in SVG
  * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-13796: Integer overflow in Chromecast
  * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13798: Heap buffer overflow in Chromecast
  * CVE-2026-13799: Use after free in QUIC
  * CVE-2026-13800: Inappropriate implementation in Updater
  * CVE-2026-13801: Integer overflow in Chromecast
  * CVE-2026-13802: Use after free in Views
  * CVE-2026-13803: Type Confusion in Chrome Tabs
  * CVE-2026-13804: Use after free in Chromecast
  * CVE-2026-13805: Use after free in GFX
  * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
  * CVE-2026-13807: Use after free in Import
  * CVE-2026-13808: Insufficient data validation in Chrome for iOS
  * CVE-2026-13809: Side-channel information leakage in Safe Browsing
  * CVE-2026-13810: Inappropriate implementation in Input
  * CVE-2026-13811: Use after free in IME
  * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13814: Use after free in Views
  * CVE-2026-13815: Use after free in Blink
  * CVE-2026-13816: Insufficient validation of untrusted input in File Input
  * CVE-2026-13817: Insufficient validation of untrusted input in Glic
  * CVE-2026-13818: Inappropriate implementation in Passwords
  * CVE-2026-13819: Out of bounds read in ANGLE
  * CVE-2026-13820: Out of bounds read in Skia
  * CVE-2026-13821: Use after free in Canvas
  * CVE-2026-13822: Inappropriate implementation in Extensions
  * CVE-2026-13823: Use after free in Glic
  * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13825: Uninitialized Use in Dawn
  * CVE-2026-13826: Inappropriate implementation in Autofill
  * CVE-2026-13827: Use after free in Updater
  * CVE-2026-13828: Inappropriate implementation in Enterprise
  * CVE-2026-13829: Insufficient validation of untrusted input in Settings
  * CVE-2026-13830: Use after free in Chromoting
  * CVE-2026-13831: Use after free in GPU
  * CVE-2026-13832: Use after free in Headless
  * CVE-2026-13833: Uninitialized Use in ANGLE
  * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13835: Inappropriate implementation in XML
  * CVE-2026-13836: Inappropriate implementation in CSS
  * CVE-2026-13837: Inappropriate implementation in CSS
  * CVE-2026-13838: Inappropriate implementation in CSS
  * CVE-2026-13839: Inappropriate implementation in CSS
  * CVE-2026-13840: Insufficient policy enforcement in Canvas
  * CVE-2026-13841: Integer overflow in Skia
  * CVE-2026-13842: Incorrect security UI in Chrome for iOS
  * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13844: Use after free in Updater
  * CVE-2026-13845: Use after free in DOM
  * CVE-2026-13846: Use after free in USB
  * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13848: Use after free in Forms
  * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13853: Use after free in Journeys
  * CVE-2026-13854: Use after free in Ozone
  * CVE-2026-13855: Use after free in Ozone
  * CVE-2026-13856: Insufficient validation of untrusted input in Speech
  * CVE-2026-13857: Inappropriate implementation in Geometry
  * CVE-2026-13858: Out of bounds read in FFmpeg
  * CVE-2026-13859: Inappropriate implementation in ANGLE
  * CVE-2026-13860: Incorrect security UI in Autofill
  * CVE-2026-13861: Use after free in Core
  * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys &amp; Security Keys)
  * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13864: Insufficient policy enforcement in WebHID
  * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13866: Insufficient validation of untrusted input in Input
  * CVE-2026-13867: Inappropriate implementation in Geolocation
  * CVE-2026-13868: Inappropriate implementation in Network
  * CVE-2026-13869: Use after free in Device
  * CVE-2026-13870: Use after free in WebView
  * CVE-2026-13871: Insufficient data validation in GuestView
  * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-13873: Out of bounds memory access in Layout
  * CVE-2026-13874: Inappropriate implementation in DataTransfer
  * CVE-2026-13875: Insufficient validation of untrusted input in GPU
  * CVE-2026-13876: Inappropriate implementation in Network
  * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-13878: Use after free in Bluetooth
  * CVE-2026-13879: Use after free in Bluetooth
  * CVE-2026-13880: Use after free in USB
  * CVE-2026-13881: Insufficient data validation in WebAppInstalls
  * CVE-2026-13882: Inappropriate implementation in USB
  * CVE-2026-13883: Type Confusion in ANGLE
  * CVE-2026-13884: Heap buffer overflow in Chromecast
  * CVE-2026-13885: Use after free in Skia
  * CVE-2026-13886: Policy bypass in Isolated Web Apps
  * CVE-2026-13887: Insufficient policy enforcement in NFC
  * CVE-2026-13888: Use after free in Extensions
  * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-13890: Out of bounds read in Chromecast
  * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
  * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
  * CVE-2026-13894: Insufficient policy enforcement in Network
  * CVE-2026-13895: Inappropriate implementation in Autofill
  * CVE-2026-13896: Insufficient policy enforcement in Glic
  * CVE-2026-13897: Insufficient policy enforcement in Chromecast
  * CVE-2026-13898: Use after free in Cast Receiver
  * CVE-2026-13899: Use after free in HTML
  * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-13901: Insufficient validation of untrusted input in Serial
  * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
  * CVE-2026-13904: Incorrect security UI in Safe Browsing
  * CVE-2026-13905: Incorrect security UI in Chrome for iOS
  * CVE-2026-13906: Out of bounds read in Codecs
  * CVE-2026-13907: Inappropriate implementation in iOSWeb
  * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-13909: Insufficient policy enforcement in DevTools
  * CVE-2026-13910: Insufficient policy enforcement in WebXR
  * CVE-2026-13911: Insufficient data validation in Spellcheck
  * CVE-2026-13912: Incorrect security UI in Safe Browsing
  * CVE-2026-13913: Insufficient policy enforcement in Autofill
  * CVE-2026-13914: Inappropriate implementation in Passwords
  * CVE-2026-13915: Use after free in Chrome for iOS
  * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13918: Use after free in Chrome for iOS
  * CVE-2026-13919: Insufficient data validation in Extensions
  * CVE-2026-13920: Insufficient validation of untrusted input in Media
  * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
  * CVE-2026-13922: Side-channel information leakage in Paint
  * CVE-2026-13923: Uninitialized Use in GPU
  * CVE-2026-13924: Insufficient validation of untrusted input in WebView
  * CVE-2026-13925: Inappropriate implementation in Downloads
  * CVE-2026-13926: Insufficient validation of untrusted input in Network
  * CVE-2026-13927: Insufficient validation of untrusted input in UI
  * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
  * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13930: Insufficient policy enforcement in Actor
  * CVE-2026-13931: Inappropriate implementation in Media
  * CVE-2026-13932: Inappropriate implementation in Sharing
  * CVE-2026-13933: Insufficient policy enforcement in Passwords
  * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
  * CVE-2026-13935: Side-channel information leakage in ComputePressure
  * CVE-2026-13936: Inappropriate implementation in Passwords
  * CVE-2026-13937: Insufficient policy enforcement in Passwords
  * CVE-2026-13938: Integer overflow in Fonts
  * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
  * CVE-2026-13940: Uninitialized Use in Cast
  * CVE-2026-13941: Inappropriate implementation in SiteSettings
  * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
  * CVE-2026-13943: Uninitialized Use in CSS
  * CVE-2026-13944: Inappropriate implementation in DataTransfer
  * CVE-2026-13945: Insufficient policy enforcement in Extensions
  * CVE-2026-13946: Inappropriate implementation in ScriptInjections
  * CVE-2026-13947: Uninitialized Use in XR
  * CVE-2026-13948: Insufficient policy enforcement in Extensions
  * CVE-2026-13949: Insufficient policy enforcement in Payments
  * CVE-2026-13950: Uninitialized Use in GPU
  * CVE-2026-13951: Policy bypass in USB
  * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
  * CVE-2026-13953: Inappropriate implementation in SplitView
  * CVE-2026-13954: Insufficient policy enforcement in XML
  * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
  * CVE-2026-13956: Incorrect security UI in PageInfo
  * CVE-2026-13957: Incorrect security UI in Extensions
  * CVE-2026-13958: Uninitialized Use in Codecs
  * CVE-2026-13959: Insufficient validation of untrusted input in Blink
  * CVE-2026-13960: Inappropriate implementation in Passwords
  * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13962: Insufficient data validation in PDF
  * CVE-2026-13963: Inappropriate implementation in DevTools
  * CVE-2026-13964: Insufficient policy enforcement in WebView
  * CVE-2026-13965: Use after free in Oilpan
  * CVE-2026-13966: Inappropriate implementation in History
  * CVE-2026-13967: Type Confusion in V8
  * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
  * CVE-2026-13969: Uninitialized Use in UI
  * CVE-2026-13970: Uninitialized Use in Media
  * CVE-2026-13971: Uninitialized Use in Skia
  * CVE-2026-13972: Inappropriate implementation in Paint
  * CVE-2026-13973: Inappropriate implementation in UI
  * CVE-2026-13974: Integer overflow in Safe Browsing
  * CVE-2026-13975: Out of bounds read in ANGLE
  * CVE-2026-13976: Heap buffer overflow in Storage
  * CVE-2026-13977: Inappropriate implementation in HTMLParser
  * CVE-2026-13978: Insufficient policy enforcement in PageInfo
  * CVE-2026-13979: Inappropriate implementation in Paint
  * CVE-2026-13980: Incorrect security UI in Chrome for iOS
  * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
  * CVE-2026-13982: Incorrect security UI in Passwords
  * CVE-2026-13983: Incorrect security UI in Chrome for iOS
  * CVE-2026-13984: Incorrect security UI in TabStrip
  * CVE-2026-13985: Inappropriate implementation in MediaCapture
  * CVE-2026-13986: Inappropriate implementation in Media UI
  * CVE-2026-13987: Incorrect security UI in Mobile
  * CVE-2026-13988: Inappropriate implementation in Paint
  * CVE-2026-13989: Insufficient policy enforcement in PageInfo
  * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-13992: Inappropriate implementation in UI
  * CVE-2026-13993: Incorrect security UI in WebAppInstalls
  * CVE-2026-13994: Inappropriate implementation in Credential Management
  * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
  * CVE-2026-13996: Incorrect security UI in Permissions
  * CVE-2026-13997: Incorrect security UI in Extensions
  * CVE-2026-13998: Incorrect security UI in File Input
  * CVE-2026-13999: Inappropriate implementation in Extensions
  * CVE-2026-14000: Inappropriate implementation in XML
  * CVE-2026-14001: Inappropriate implementation in Network
  * CVE-2026-14002: Inappropriate implementation in Geolocation
  * CVE-2026-14003: Insufficient policy enforcement in Extensions
  * CVE-2026-14004: Inappropriate implementation in CSS
  * CVE-2026-14005: Use after free in Omnibox
  * CVE-2026-14006: Use after free in Navigation
  * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
  * CVE-2026-14008: Uninitialized Use in WebXR
  * CVE-2026-14009: Insufficient data validation in Passwords
  * CVE-2026-14010: Uninitialized Use in Codecs
  * CVE-2026-14011: Out of bounds read in SurfaceCapture
  * CVE-2026-14012: Side-channel information leakage in CSS
  * CVE-2026-14013: Inappropriate implementation in SVG
  * CVE-2026-14014: Inappropriate implementation in Paint
  * CVE-2026-14015: Inappropriate implementation in WebRTC
  * CVE-2026-14016: Insufficient policy enforcement in SVG
  * CVE-2026-14017: Inappropriate implementation in Navigation
  * CVE-2026-14018: Use after free in Updater
  * CVE-2026-14019: Inappropriate implementation in Passwords
  * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
  * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
  * CVE-2026-14022: Insufficient validation of untrusted input in Network
  * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
  * CVE-2026-14024: Use after free in Ozone
  * CVE-2026-14025: Use after free in Views
  * CVE-2026-14026: Incorrect security UI in SplitView
  * CVE-2026-14027: Use after free in SignIn
  * CVE-2026-14028: Incorrect security UI in Chrome for iOS
  * CVE-2026-14030: Incorrect security UI in SplitView
  * CVE-2026-14031: Incorrect security UI in File Input
  * CVE-2026-14032: Use after free in Bluetooth
  * CVE-2026-14033: Insufficient policy enforcement in Media
  * CVE-2026-14034: Inappropriate implementation in WebXR
  * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
  * CVE-2026-14037: Insufficient policy enforcement in GPU
  * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
  * CVE-2026-14040: Use after free in BrowserTag
  * CVE-2026-14041: Insufficient policy enforcement in Serial
  * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-14043: Use after free in GetUserMedia
  * CVE-2026-14044: Use after free in ANGLE
  * CVE-2026-14045: Insufficient validation of untrusted input in Network
  * CVE-2026-14046: Inappropriate implementation in CustomTabs
  * CVE-2026-14047: Insufficient policy enforcement in Extensions
  * CVE-2026-14048: Use after free in Chromecast
  * CVE-2026-14049: Inappropriate implementation in GPU
  * CVE-2026-14050: Insufficient policy enforcement in Passwords
  * CVE-2026-14051: Uninitialized Use in GamepadAPI
  * CVE-2026-14052: Insufficient policy enforcement in FileSystem
  * CVE-2026-14053: Insufficient policy enforcement in Extensions
  * CVE-2026-14054: Insufficient policy enforcement in Network
  * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
  * CVE-2026-14056: Insufficient validation of untrusted input in Media
  * CVE-2026-14057: Insufficient policy enforcement in FedCM
  * CVE-2026-14058: Policy bypass in Parser
  * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
  * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14061: Inappropriate implementation in Dawn
  * CVE-2026-14062: Inappropriate implementation in Views
  * CVE-2026-14063: Out of bounds memory access in Chromecast
  * CVE-2026-14064: Use after free in PageInfo
  * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
  * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14067: Use after free in Chrome for iOS
  * CVE-2026-14068: Inappropriate implementation in Omnibox
  * CVE-2026-14069: Integer overflow in WebNN
  * CVE-2026-14070: Uninitialized Use in WebNN
  * CVE-2026-14071: Side-channel information leakage in WebAudio
  * CVE-2026-14072: Incorrect security UI in SplitView
  * CVE-2026-14073: Insufficient policy enforcement in WebXR
  * CVE-2026-14074: Side-channel information leakage in WebAuthentication
  * CVE-2026-14075: Policy bypass in Chrome for iOS
  * CVE-2026-14076: Policy bypass in Network
  * CVE-2026-14077: Incorrect security UI in Select
  * CVE-2026-14078: Policy bypass in WebRTC
  * CVE-2026-14079: Policy bypass in Network
  * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
  * CVE-2026-14081: Insufficient policy enforcement in DevTools
  * CVE-2026-14082: Race in Storage
  * CVE-2026-14083: Insufficient validation of untrusted input in HTML
  * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-14085: Side-channel information leakage in CSS
  * CVE-2026-14086: Insufficient policy enforcement in HID
  * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
  * CVE-2026-14088: Uninitialized Use in Canvas
  * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
  * CVE-2026-14090: Out of bounds read in CameraCapture
  * CVE-2026-14091: Use after free in DevTools
  * CVE-2026-14092: Insufficient policy enforcement in Privacy
  * CVE-2026-14093: Use after free in Cast
  * CVE-2026-14094: Use after free in Installer
  * CVE-2026-14095: Insufficient validation of untrusted input in Browser
  * CVE-2026-14096: Object lifecycle issue in Input
  * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14098: Inappropriate implementation in CSS
  * CVE-2026-14099: Use after free in Chrome for iOS
  * CVE-2026-14100: Insufficient data validation in NetworkCache
  * CVE-2026-14101: Insufficient policy enforcement in Sandbox
  * CVE-2026-14102: Use after free in Passwords
  * CVE-2026-14103: Use after free in SSL
  * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14105: Insufficient policy enforcement in Speech
  * CVE-2026-14106: Insufficient validation of untrusted input in Text
  * CVE-2026-14107: Use after free in Scheduling
  * CVE-2026-14108: Use after free in PDFium
  * CVE-2026-14109: Insufficient policy enforcement in Mojo
  * CVE-2026-14110: Inappropriate implementation in DarkMode
  * CVE-2026-14111: Use after free in WebProtect
  * CVE-2026-14112: Inappropriate implementation in Enterprise
  * CVE-2026-14113: Use after free in Updater
  * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14115: Insufficient validation of untrusted input in Cast
  * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
  * CVE-2026-14118: Insufficient data validation in DevTools
  * CVE-2026-14119: Type Confusion in Bluetooth
  * CVE-2026-14120: Inappropriate implementation in DevTools
  * CVE-2026-14121: Use after free in Chromoting
  * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14123: Incorrect security UI in Chrome for iOS
  * CVE-2026-14124: Inappropriate implementation in CredentialProvider
  * CVE-2026-14125: Uninitialized Use in ANGLE
  * CVE-2026-14126: Incorrect security UI in UI
  * CVE-2026-14127: Inappropriate implementation in Printing
  * CVE-2026-14128: Insufficient data validation in Chrome for iOS
  * CVE-2026-14129: Incorrect security UI in PreviewTab
  * CVE-2026-14130: Incorrect security UI in Omnibox
  * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-14132: Inappropriate implementation in WebXR
  * CVE-2026-14133: Race in History Embeddings
  * CVE-2026-14134: Inappropriate implementation in Autofill
  * CVE-2026-14135: Insufficient validation of untrusted input in Network
  * CVE-2026-14136: Incorrect security UI in Chrome for iOS
  * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
  * CVE-2026-14139: Inappropriate implementation in TabStrip
  * CVE-2026-14140: Insufficient validation of untrusted input in Input
  * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
  * CVE-2026-14142: Inappropriate implementation in Extensions
  * CVE-2026-14143: Incorrect security UI in Passwords
  * CVE-2026-14144: Incorrect security UI in Views
  * CVE-2026-14145: Inappropriate implementation in CSS
  * CVE-2026-14146: Inappropriate implementation in CSS
  * CVE-2026-14147: Inappropriate implementation in CSS
  * CVE-2026-14148: Type Confusion in CSS
  * CVE-2026-14149: Use after free in Audio
  * CVE-2026-14150: Insufficient validation of untrusted input in Speech
  * CVE-2026-14151: Inappropriate implementation in AI
  * CVE-2026-14152: Out of bounds write in ANGLE
  * CVE-2026-14153: Inappropriate implementation in Glic
  * CVE-2026-14154: Inappropriate implementation in DevTools
  * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
  * CVE-2026-14156: Policy bypass in StorageAccessAPI
- Remove Darkmode patches, which are already included in v150
- Refresh patches for v150
- Fix FTBFS with system ffmpeg
- Backport upstream patches to fix FTBFS</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.100-1" date="1783512000">- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.114-1" date="1783598400">- Update to 150.0.7871.114
  * CVE-2026-15112: Use after free in Ozone
  * CVE-2026-15129: Use after free in Views
  * CVE-2026-15132: Uninitialized Use in V8
  * CVE-2026-15133: Use after free in InterestGroups
  * CVE-2026-15108: Integer overflow in Extensions API
  * CVE-2026-15109: Uninitialized Use in ANGLE
  * CVE-2026-15110: Use after free in Extensions
  * CVE-2026-15111: Use after free in Views
  * CVE-2026-15113: Use after free in Autofill
  * CVE-2026-15114: Out of bounds read and write in Codecs
  * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-15116: Use after free in Actor
  * CVE-2026-15117: Use after free in Payments
  * CVE-2026-15118: Use after free in Input
  * CVE-2026-15119: Inappropriate implementation in GetUserMedia
  * CVE-2026-15120: Use after free in Core
  * CVE-2026-15121: Use after free in WebRTC
  * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
  * CVE-2026-15123: Insufficient data validation in DOM
  * CVE-2026-15124: Insufficient policy enforcement in Passwords
  * CVE-2026-15125: Inappropriate implementation in Forms
  * CVE-2026-15126: Use after free in Forms
  * CVE-2026-15127: Inappropriate implementation in WebGL
  * CVE-2026-15128: Inappropriate implementation in Forms
  * CVE-2026-15130: Insufficient policy enforcement in Navigation
  * CVE-2026-15107: Use after free in IndexedDB
  * CVE-2026-15131: Insufficient data validation in Navigation</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.124-1" date="1784116800">- Update to 150.0.7871.124
  * CVE-2026-15764: Use after free in Ozone
  * CVE-2026-15765: Use after free in Ozone
  * CVE-2026-15766: Uninitialized Use in Skia
  * CVE-2026-15767: Heap buffer overflow in libyuv
  * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
  * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
  * CVE-2026-15770: Uninitialized Use in V8
  * CVE-2026-15771: Insufficient validation of untrusted input in Media
  * CVE-2026-15772: Use after free in GPU
  * CVE-2026-15773: Use after free in Core
  * CVE-2026-15774: Use after free in Skia
  * CVE-2026-15775: Insufficient policy enforcement in V8
  * CVE-2026-15776: Type Confusion in V8
  * CVE-2026-15777: Use after free in UI
  * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
- Backport patches to improve auto darkmode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 150.0.7871.124-2" date="1784116801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.128-1" date="1784548800">- Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
- Improve auto darkmode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.181-1" date="1784721600">- Update to 150.0.7871.181
  * CVE-2026-16413: Out of bounds write in ANGLE
  * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
  * CVE-2026-16416: Integer overflow in Chromecast
  * CVE-2026-16417: Uninitialized Use in Skia
  * CVE-2026-16418: Stack buffer overflow in V8
  * CVE-2026-16419: Out of bounds read and write in ANGLE
  * CVE-2026-16420: Type Confusion in WebAudio
  * CVE-2026-16421: Inappropriate implementation in WebAudio
  * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
  * CVE-2026-16423: Use after free in UI
  * CVE-2026-16424: Use after free in GPU</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 150.0.7871.186-1" date="1784894400">- Update to 150.0.7871.186
  * CVE-2026-16807: Out of bounds write in Codecs
  * CVE-2026-16806: Use after free in WebMCP
  * CVE-2026-16805: Use after free in Blink
  * CVE-2026-16804: Use after free in Input</changelog>
</package>
<package pkgid="4452f240d68e6418cee881ec64caec749c5b1149ff98a86277372542dc766032" name="converseen-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="7d126e2e9983a9fa017a6c292a48e9f94f2401d29e4813baf9b0421bb3fe8a1a" name="converseen-debugsource" arch="x86_64">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="d3c6f38d817d6c18aef4fb0f7f55616b7ced40db9bf94c991b59b39fb850fc90" name="coturn-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="33b14303e5da6b740453cc741a12a9ffebb54b932bca409095149a013cbedff0" name="coturn-debugsource" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="d3021aa275293ac2f543d31bdf16377eee9e405767b8df3505c2fe71063b199a" name="coturn-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="531979d4badb3f4067ba914a449d1a1e5195d8a669ffe8b028b52573441c5e0b" name="cube-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="23b568e836190d158a0310e5f0e9b13ad8f1d53333fa779748f8b62b2d39ee3c" name="cube-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="cd383f4f3685460abb4c44b1572eb9121e8574a06e4de31699367807fcb67742" name="cube-guilib-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="975c9f133bea6b4a24e9279c0b98188cac4c942ab3415c72964787861f08e982" name="cube-guilib-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="62c74b7564e04865979137db568114c9dc6e3ce0fc2124737fc8be7ffd23b56a" name="cube-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="37147d2207c33f6bbd34f7982f0ce3c1523ef340ffaccd1c0fe3342c4b9130d6" name="cube-libs-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="e16b2c820c6093a0477a69dd401cd75cbf424ba2c4232699f4152c3cddfc73f3" name="goaccess-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.11" rel="1.el10_2"/>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.9.3-2" date="1721908800">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Eduardo Echeverria &lt;echevemaster@gmail.com&gt; - 1.9.3-4" date="1737806400">- Rebuilt due to FTBFS</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.9.4-1" date="1743508800">- Update to 1.9.4. Fixes rhbz#2356494</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.10.1-1" date="1771588800">- Update to goaccess 1.10.1. Fixes rhbz#2439640</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.10.2-1" date="1777809600">- Update to 1.10.2. Fixes rhbz#2453671</changelog>
  <changelog author="Eduardo Echeverria &lt;echevemaster@gmail.com&gt; - 1.11-1" date="1784980800">- Update to 1.11. Fixes rhbz#2502800
- Added automatic, crash-safe migration of persisted databases to storage
  format version 3
- Added configured zlib and AddressSanitizer options to the version output
- Added fullscreen expand and collapse controls to geolocation maps in the
  HTML report
- Added Traditional Chinese translation
- Expanded Debian package builds to Ubuntu 26.04 and additional
  architectures, and updated the packaging workflow actions
- Fixed a heap buffer overflow when parsing malformed Opera user agents
- Fixed an infinite loop while writing log parsing errors from multiple
  input files
- Fixed city lookups ignoring the City database when a Country database was
  listed first
- Fixed geolocation maps appearing grey after restoring persisted city data
- Fixed .gz file extensions being interpreted as macros in the man page
- Fixed iOS version parsing from user-agent strings
- Fixed unique visitor undercounting caused by collisions between reversed
  data and visitor key pairs
- Fixed WebSocket payload size checks for large and fragmented messages
- Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
  browser category
- Reduced storage memory usage by about 20% and parsing time by about 35%</changelog>
</package>
<package pkgid="d3ce11aac7c0787d6e1baa6c7401933ff9c3691c0d7d5f2acd11358629e2a640" name="goaccess-debugsource" arch="x86_64">
  <version epoch="0" ver="1.11" rel="1.el10_2"/>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.9.3-2" date="1721908800">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Eduardo Echeverria &lt;echevemaster@gmail.com&gt; - 1.9.3-4" date="1737806400">- Rebuilt due to FTBFS</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.9.4-1" date="1743508800">- Update to 1.9.4. Fixes rhbz#2356494</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.10.1-1" date="1771588800">- Update to goaccess 1.10.1. Fixes rhbz#2439640</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 1.10.2-1" date="1777809600">- Update to 1.10.2. Fixes rhbz#2453671</changelog>
  <changelog author="Eduardo Echeverria &lt;echevemaster@gmail.com&gt; - 1.11-1" date="1784980800">- Update to 1.11. Fixes rhbz#2502800
- Added automatic, crash-safe migration of persisted databases to storage
  format version 3
- Added configured zlib and AddressSanitizer options to the version output
- Added fullscreen expand and collapse controls to geolocation maps in the
  HTML report
- Added Traditional Chinese translation
- Expanded Debian package builds to Ubuntu 26.04 and additional
  architectures, and updated the packaging workflow actions
- Fixed a heap buffer overflow when parsing malformed Opera user agents
- Fixed an infinite loop while writing log parsing errors from multiple
  input files
- Fixed city lookups ignoring the City database when a Country database was
  listed first
- Fixed geolocation maps appearing grey after restoring persisted city data
- Fixed .gz file extensions being interpreted as macros in the man page
- Fixed iOS version parsing from user-agent strings
- Fixed unique visitor undercounting caused by collisions between reversed
  data and visitor key pairs
- Fixed WebSocket payload size checks for large and fragmented messages
- Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
  browser category
- Reduced storage memory usage by about 20% and parsing time by about 35%</changelog>
</package>
<package pkgid="2442214a7b1de9ce0e1d2761a917dcb3f014a34d80abdcff9bd33523f6454abe" name="haveged-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="b023293c549c49bd10819c090ec115fed73bde88f68df98cb85200f406b8a167" name="haveged-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="720fdf9635e7606ec1e62327dc8286571c53e2697b0d491962135e5195bc70c1" name="intel-compute-runtime-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="14cde780b03ed1a727e4bb3607516f257c2e5eeef4a8775ef13fc2229680f757" name="intel-compute-runtime-debugsource" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="5c6af6ff932f10fad42e35ea714f2dc0ac4375a47ec25af8d1922d6ab640077a" name="intel-igc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="a14deb33b9149373db73cbb23942616603da56c51db74b96a8db86e671f1cf5c" name="intel-igc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="12ec7b0f9ab1b55a557e9af89c8404ca4b733d10bc9b54e00ab06f96b34bb74a" name="intel-igc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="2ca0c769ca354065124ea33c1d16d651dca62c387a16f4fdc62fbc692d5e6027" name="intel-level-zero-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="20f19459b655e502d5a867c904d5c47ae5e7314ddec33c62c32e3cbbb38fa01f" name="intel-ocloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="0d1fd274720f3cb809443de3d64a866ecb4e8c5791b4da4ebf2097cf7e045741" name="intel-opencl-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="786a570bf80334300c3d9f976e925621b119189a57c1a1becf5808bb97d4ae76" name="libbitcoinkernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="d51e921179acd2bd85011dfc8ddae3c9e5f42d89bd97bb8ee0105afb954defbb" name="libbitcoinkernel-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="03ccb35705e6d1ff37fc313a46d3ea1676142150c5b2e779296240756c48358c" name="libgit2_1.9-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-1" date="1778155200">- Initial import (#2456496)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-2" date="1778587200">- Explicitly conflict with other libgit2 devel packages</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-3" date="1779796800">- Enable SSH support in EPEL</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1780574400">- Update to version 1.9.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-1" date="1784808000">- Update to version 1.9.6</changelog>
</package>
<package pkgid="8dc142c3975e303c466f89c55c4e047b5121536c95616e053e67be17cc23d47c" name="libgit2_1.9-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-1" date="1778155200">- Initial import (#2456496)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-2" date="1778587200">- Explicitly conflict with other libgit2 devel packages</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-3" date="1779796800">- Enable SSH support in EPEL</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1780574400">- Update to version 1.9.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-1" date="1784808000">- Update to version 1.9.6</changelog>
</package>
<package pkgid="fcdc4e3395c90ac9b3b265d300d1669386dfb9d242208fdfa4f3c71c1f4340c0" name="libre-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770379200">- Upgrade to 4.5.0 (#2433715)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444336)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455853)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476983)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.1-1" date="1779969600">- Upgrade to 4.8.1 (#2482756)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.1-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489791)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506126)</changelog>
</package>
<package pkgid="cffcf5933ca79fa9d8583647dbbf902a7c72f7d13523ec78c22cb6f2f3f9ea16" name="libre-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.5.0-1" date="1770379200">- Upgrade to 4.5.0 (#2433715)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.6.0-1" date="1772884800">- Upgrade to 4.6.0 (#2444336)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.7.0-1" date="1776513600">- Upgrade to 4.7.0 (#2455853)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.0-1" date="1778846400">- Upgrade to 4.8.0 (#2476983)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.8.1-1" date="1779969600">- Upgrade to 4.8.1 (#2482756)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.8.1-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.9.0-1" date="1781784000">- Upgrade to 4.9.0 (#2489791)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 4.10.0-1" date="1785067200">- Upgrade to 4.10.0 (#2506126)</changelog>
</package>
<package pkgid="d4fdb13948226bf8c2bee33e091d47b376283f306cc71bd0a34d87309ff6d2f4" name="nsd-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12.0-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.13.0-1" date="1756900800">- Upgrade to 4.13.0. Fixes rhbz#2392842</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.0-1" date="1765281600">- Update to 4.14.0</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 4.14.0-2" date="1765281601">- Add nlnetlabs2026-g2.asc key for 2026 signature verification</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.2-1" date="1774353600">- update to 4.14.2. Fixes rhbz#2442265</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.14.2-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.3-1" date="1782475200">- Update to 4.14.3. Fixes rhbz#2492647</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.15.0-1" date="1784980800">- Update to 4.15.0. Fixes rhbz#2497645</changelog>
</package>
<package pkgid="8c77f63ab5ce7ce9d702ec824438aec59860fb9968c2aae6c0fc5340ae06c814" name="nsd-debugsource" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12.0-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.13.0-1" date="1756900800">- Upgrade to 4.13.0. Fixes rhbz#2392842</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.0-1" date="1765281600">- Update to 4.14.0</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 4.14.0-2" date="1765281601">- Add nlnetlabs2026-g2.asc key for 2026 signature verification</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.2-1" date="1774353600">- update to 4.14.2. Fixes rhbz#2442265</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.14.2-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.14.3-1" date="1782475200">- Update to 4.14.3. Fixes rhbz#2492647</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;mail@fale.io&gt; - 4.15.0-1" date="1784980800">- Update to 4.15.0. Fixes rhbz#2497645</changelog>
</package>
<package pkgid="a78b90f75cb2918e566edeef52a914735d302c0992d2563d3ff2fde8c4b54b4e" name="ntfs-3g-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="256fe6f9b7925e610e6361dac90d49460f2b6c82ef8dc2f7f88f5930723c45f4" name="ntfs-3g-debugsource" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="c303bec23558172fc391424727f74e7e3c9a2a4d126bdafb326a365690ebe386" name="ntfs-3g-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="2e71e5086c83de9679fe0f869e35911cc1ac469c271504ecb3b34453efd98c09" name="ntfsprogs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="35b223dec0b4351f6bbc23ed18f1cc96ea3ca43414bd2cd383b8df384c8af04a" name="openbao-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
</package>
<package pkgid="d30f67d3881ef5a17403f3d3aa844d566db81d59c750371e6ed755e39d71e10d" name="openbao-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
</package>
<package pkgid="3c474aa3bae35303084ce5aa18ccb0231e57ac53cc7e44d95aba9ba11035878f" name="pdns-recursor-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.1-3" date="1779883200">- add make check section to silent rpmlint</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 5.4.1-4" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-1" date="1780574400">- update to 5.4.2 fixes rhbz#2484316</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-2" date="1780574401">- opt-in to packit</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-4" date="1781438400">- Drop unused openssl-devel-engine dependency</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 5.4.3-1" date="1782388800">- update to 5.4.3 fixes rhbz#2492868
- a bunch of other bugs were fixed and will be backported to all supported
  Fedora / EPEL versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-1" date="1784721600">- update to 5.4.4 fixes rhbz#2506049</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-2" date="1784721601">- remove unused patch</changelog>
</package>
<package pkgid="1faefc99bb319920da032cbedfd7abbb3dfd8e6e9f6233eb2c3f5d6301b71123" name="pdns-recursor-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.1-3" date="1779883200">- add make check section to silent rpmlint</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 5.4.1-4" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-1" date="1780574400">- update to 5.4.2 fixes rhbz#2484316</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-2" date="1780574401">- opt-in to packit</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-4" date="1781438400">- Drop unused openssl-devel-engine dependency</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 5.4.3-1" date="1782388800">- update to 5.4.3 fixes rhbz#2492868
- a bunch of other bugs were fixed and will be backported to all supported
  Fedora / EPEL versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-1" date="1784721600">- update to 5.4.4 fixes rhbz#2506049</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-2" date="1784721601">- remove unused patch</changelog>
</package>
<package pkgid="3dec0b6de7d7fd0517d2c701417015e7109e84e2ff58e4af7fb69e6516fcb198" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="b631f14a7d1c9d328690ee0d9580bc1e0a3d4283ed6fe485f0535c8fed15c6bc" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="e06dfe02a2de928518aef30044aa6dc0dcfe0ce81a47b093443042a651688690" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="f9768935667bcd21d083bb3a47ca9758623128d61d41745b41e124b76834f26d" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="bab37706b008f473a525ed79cbec3b8918fd877c4585c853de48c049270bcb5c" name="proftpd-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="2c7734f763d4c413447a7695ca14e460f3717ea111a40f9ea41d1b57a3ec5aa1" name="proftpd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="b0f2b7e5b7b55c02aba0a8b980f2793fe1471128591e95acc3de28b4c476a3c7" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="3b01b2850e30c4a319539165a4ef43cbb08c8a204ac4a3adb3e4b8a55bd26d00" name="proftpd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="b98f932ca409825d3ab466fb51aac3bfe734352068e7d5ec010a2f7076b404e6" name="restic-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="bc541d4d2df95eb0a92ac333daebf24611bfb94674f7c404f3a8064c9ca4d407" name="restic-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="1f55576cf7eac58b06b0220ad2b13a74a6925a5dfe06d298ca39250b4167b648" name="xrootd-s3-http-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.9" rel="1.el10_2"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
<package pkgid="84921581d7eb82e2427d6223294b13d6e6cf18da14b65ccbbfb58e88a56afd56" name="xrootd-s3-http-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.9" rel="1.el10_2"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
</otherdata>