# changelog

author: Simone Caronni <negativo17@gmail.com> - 1:1.4.36-1
changelog:
  - All references to 1.4.36.0 have disappeared completely from the git
    repository and 1.4.36 has been released in place. Bump Epoch to point to
    a real release.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Than Ngo <than@redhat.com> - 146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
    * CVE-2026-4439: Out of bounds memory access in WebGL
    * CVE-2026-4440: Out of bounds read and write in WebGL
    * CVE-2026-4441: Use after free in Base
    * CVE-2026-4442: Heap buffer overflow in CSS
    * CVE-2026-4443: Heap buffer overflow in WebAudio
    * CVE-2026-4444: Stack buffer overflow in WebRTC
    * CVE-2026-4445: Use after free in WebRTC
    * CVE-2026-4446: Use after free in WebRTC
    * CVE-2026-4447: Inappropriate implementation in V8
    * CVE-2026-4448: Heap buffer overflow in ANGLE
    * CVE-2026-4449: Use after free in Blink
    * CVE-2026-4450: Out of bounds write in V8
    * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    * CVE-2026-4452: Integer overflow in ANGLE
    * CVE-2026-4453: Integer overflow in Dawn
    * CVE-2026-4454: Use after free in Network
    * CVE-2026-4455: Heap buffer overflow in PDFium
    * CVE-2026-4456: Use after free in Digital Credentials API
    * CVE-2026-4457: Type Confusion in V8
    * CVE-2026-4458: Use after free in Extensions
    * CVE-2026-4459: Out of bounds read and write in WebAudio
    * CVE-2026-4460: Out of bounds read in Skia
    * CVE-2026-4461: Inappropriate implementation in V8
    * CVE-2026-4462: Out of bounds read in Blink
    * CVE-2026-4463: Heap buffer overflow in WebRTC
    * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
    * High CVE-2026-4673: Heap buffer overflow in WebAudio
    * High CVE-2026-4674: Out of bounds read in CSS
    * High CVE-2026-4675: Heap buffer overflow in WebGL
    * High CVE-2026-4676: Use after free in Dawn
    * High CVE-2026-4677: Out of bounds read in WebAudio
    * High CVE-2026-4678: Use after free in WebGPU
    * High CVE-2026-4679: Integer overflow in Fonts
    * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Than Ngo <than@redhat.com> - 147.0.7727.101-1
changelog:
  - Update to 147.0.7727.101
    * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
    * Critical CVE-2026-6297: Use after free in Proxy
    * Critical CVE-2026-6298: Heap buffer overflow in Skia
    * Critical CVE-2026-6299: Use after free in Prerender
    * Critical CVE-2026-6358: Use after free in XR
    * High CVE-2026-6359: Use after free in Video
    * High CVE-2026-6300: Use after free in CSS
    * High CVE-2026-6301: Type Confusion in Turbofan
    * High CVE-2026-6302: Use after free in Video
    * High CVE-2026-6303: Use after free in Codecs
    * High CVE-2026-6304: Use after free in Graphite
    * High CVE-2026-6305: Heap buffer overflow in PDFium
    * High CVE-2026-6306: Heap buffer overflow in PDFium
    * High CVE-2026-6307: Type Confusion in Turbofan
    * High CVE-2026-6308: Out of bounds read in Media
    * High CVE-2026-6309: Use after free in Viz
    * High CVE-2026-6360: Use after free in FileSystem
    * High CVE-2026-6310: Use after free in Dawn
    * High CVE-2026-6311: Uninitialized Use in Accessibility
    * High CVE-2026-6312: Insufficient policy enforcement in Passwords
    * High CVE-2026-6313: Insufficient policy enforcement in CORS
    * High CVE-2026-6314: Out of bounds write in GPU
    * High CVE-2026-6315: Use after free in Permissions
    * High CVE-2026-6316: Use after free in Forms
    * High CVE-2026-6361: Heap buffer overflow in PDFium
    * High CVE-2026-6362: Use after free in Codecs
    * High CVE-2026-6317: Use after free in Cast
    * Medium CVE-2026-6363: Type Confusion in V8
    * Medium CVE-2026-6318: Use after free in Codecs
    * Medium CVE-2026-6319: Use after free in Payments
    * Medium CVE-2026-6364: Out of bounds read in Skia


author: Than Ngo <than@redhat.com> - 147.0.7727.116-1
changelog:
  - Update to 147.0.7727.116
    * High CVE-2026-6919: Use after free in DevTools
    * High CVE-2026-6920: Out of bounds read in GPU
    * Medium CVE-2026-6921: Race in GPU
  - Fix rhbz#2458171, unexpanded macros in manpage


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
    - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Reject Unicode digits and trailing newlines in parser inputs
      (CVE-2026-45190)
    - Reject zero-padded CIDR masks (CVE-2026-45191)


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-6
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


