# changelog

author: Than Ngo <than@redhat.com> - 150.0.7871.114-1
changelog:
  - Update to 150.0.7871.114
    * CVE-2026-15112: Use after free in Ozone
    * CVE-2026-15129: Use after free in Views
    * CVE-2026-15132: Uninitialized Use in V8
    * CVE-2026-15133: Use after free in InterestGroups
    * CVE-2026-15108: Integer overflow in Extensions API
    * CVE-2026-15109: Uninitialized Use in ANGLE
    * CVE-2026-15110: Use after free in Extensions
    * CVE-2026-15111: Use after free in Views
    * CVE-2026-15113: Use after free in Autofill
    * CVE-2026-15114: Out of bounds read and write in Codecs
    * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-15116: Use after free in Actor
    * CVE-2026-15117: Use after free in Payments
    * CVE-2026-15118: Use after free in Input
    * CVE-2026-15119: Inappropriate implementation in GetUserMedia
    * CVE-2026-15120: Use after free in Core
    * CVE-2026-15121: Use after free in WebRTC
    * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
    * CVE-2026-15123: Insufficient data validation in DOM
    * CVE-2026-15124: Insufficient policy enforcement in Passwords
    * CVE-2026-15125: Inappropriate implementation in Forms
    * CVE-2026-15126: Use after free in Forms
    * CVE-2026-15127: Inappropriate implementation in WebGL
    * CVE-2026-15128: Inappropriate implementation in Forms
    * CVE-2026-15130: Insufficient policy enforcement in Navigation
    * CVE-2026-15107: Use after free in IndexedDB
    * CVE-2026-15131: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 150.0.7871.124-1
changelog:
  - Update to 150.0.7871.124
    * CVE-2026-15764: Use after free in Ozone
    * CVE-2026-15765: Use after free in Ozone
    * CVE-2026-15766: Uninitialized Use in Skia
    * CVE-2026-15767: Heap buffer overflow in libyuv
    * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
    * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
    * CVE-2026-15770: Uninitialized Use in V8
    * CVE-2026-15771: Insufficient validation of untrusted input in Media
    * CVE-2026-15772: Use after free in GPU
    * CVE-2026-15773: Use after free in Core
    * CVE-2026-15774: Use after free in Skia
    * CVE-2026-15775: Insufficient policy enforcement in V8
    * CVE-2026-15776: Type Confusion in V8
    * CVE-2026-15777: Use after free in UI
    * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
  - Backport patches to improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.128-1
changelog:
  - Update to 150.0.7871.128
    * CVE-2026-15899: Use after free in CameraCapture
    * CVE-2026-15900: Use after free in GPU
    * CVE-2026-15901: Use after free in Network
    * CVE-2026-15902: Use after free in Cast
    * CVE-2026-15903: Out of bounds read and write in V8
    * CVE-2026-15904: Use after free in Ozone
    * CVE-2026-15905: Use after free in Aura
  - Fix rhbz#2501811, Drop AI policy which breaks DoH settings
  - Improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.181-1
changelog:
  - Update to 150.0.7871.181
    * CVE-2026-16413: Out of bounds write in ANGLE
    * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
    * CVE-2026-16416: Integer overflow in Chromecast
    * CVE-2026-16417: Uninitialized Use in Skia
    * CVE-2026-16418: Stack buffer overflow in V8
    * CVE-2026-16419: Out of bounds read and write in ANGLE
    * CVE-2026-16420: Type Confusion in WebAudio
    * CVE-2026-16421: Inappropriate implementation in WebAudio
    * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
    * CVE-2026-16423: Use after free in UI
    * CVE-2026-16424: Use after free in GPU


author: Than Ngo <than@redhat.com> - 150.0.7871.186-1
changelog:
  - Update to 150.0.7871.186
    * CVE-2026-16807: Out of bounds write in Codecs
    * CVE-2026-16806: Use after free in WebMCP
    * CVE-2026-16805: Use after free in Blink
    * CVE-2026-16804: Use after free in Input


author: Than Ngo <than@redhat.com> - 151.0.7922.71-1
changelog:
  - Update to 151.0.7922.71
    * CVE-2026-17650: Use after free in Compositing
    * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17652: Use after free in Views
    * CVE-2026-17653: Use after free in Skia
    * CVE-2026-17654: Race in Updater
    * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17656: Use after free in Ozone
    * CVE-2026-17657: Use after free in Navigation
    * CVE-2026-17658: Use after free in V8
    * CVE-2026-17659: Inappropriate implementation in SiteIsolation
    * CVE-2026-17660: Insufficient validation of untrusted input in Network
    * CVE-2026-17661: Use after free in Loader
    * CVE-2026-17662: Insufficient policy enforcement in Prefetch
    * CVE-2026-17663: Insufficient validation of untrusted input in GPU
    * CVE-2026-17664: Insufficient validation of untrusted input in Loader
    * CVE-2026-17665: Use after free in V8
    * CVE-2026-17666: Cryptographic Flaw in Enterprise
    * CVE-2026-17667: Uninitialized Use in ANGLE
    * CVE-2026-17668: Uninitialized Use in ANGLE
    * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17670: Use after free in Views
    * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-17673: Integer overflow in QUIC
    * CVE-2026-17674: Inappropriate implementation in HTML
    * CVE-2026-17675: Out of bounds write in ANGLE
    * CVE-2026-17676: Inappropriate implementation in ANGLE
    * CVE-2026-17677: Inappropriate implementation in ANGLE
    * CVE-2026-17678: Out of bounds read in ANGLE
    * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
    * CVE-2026-17680: Heap buffer overflow in Color
    * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
    * CVE-2026-17682: Integer overflow in ANGLE
    * CVE-2026-17683: Inappropriate implementation in ANGLE
    * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17685: Use after free in Autofill
    * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17687: Type Confusion in ANGLE
    * CVE-2026-17688: Use after free in Input
    * CVE-2026-17689: Uninitialized Use in ANGLE
    * CVE-2026-17690: Insufficient validation of untrusted input in PDF
    * CVE-2026-17691: Out of bounds write in ANGLE
    * CVE-2026-17692: Use after free in DataTransfer
    * CVE-2026-17693: Inappropriate implementation in FileSystem
    * CVE-2026-17694: Use after free in DOM
    * CVE-2026-17695: Inappropriate implementation in ANGLE
    * CVE-2026-17696: Side-channel information leakage in Media
    * CVE-2026-17697: Type Confusion in ANGLE
    * CVE-2026-17698: Insufficient validation of untrusted input in UI
    * CVE-2026-17699: Use after free in Views
    * CVE-2026-17700: Insufficient validation of untrusted input in Actor
    * CVE-2026-17701: Out of bounds read in ANGLE
    * CVE-2026-17702: Inappropriate implementation in Skia
    * CVE-2026-17703: Policy bypass in Chrome for iOS
    * CVE-2026-17704: Use after free in ANGLE
    * CVE-2026-17705: Integer overflow in libxml
    * CVE-2026-17706: Insufficient validation of untrusted input in Media
    * CVE-2026-17707: Uninitialized Use in Media
    * CVE-2026-17708: Use after free in Audio
    * CVE-2026-17709: Race in Downloads
    * CVE-2026-17710: Inappropriate implementation in MHTML
    * CVE-2026-17711: Race in Downloads
    * CVE-2026-17712: Race in Skia
    * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-17714: Uninitialized Use in ANGLE
    * CVE-2026-17715: Inappropriate implementation in Passwords
    * CVE-2026-17716: Use after free in Updater
    * CVE-2026-17717: Integer overflow in ANGLE
    * CVE-2026-17718: Use after free in ANGLE
    * CVE-2026-17719: Use after free in Input
    * CVE-2026-17720: Insufficient policy enforcement in Passwords
    * CVE-2026-17721: Out of bounds write in ANGLE
    * CVE-2026-17722: Object lifecycle issue in WebView
    * CVE-2026-17723: Use after free in Media
    * CVE-2026-17724: Race in Chrome for iOS
    * CVE-2026-17725: Type Confusion in V8
    * CVE-2026-17726: Integer overflow in WebGL
    * CVE-2026-17727: Out of bounds write in WebGL
    * CVE-2026-17728: Inappropriate implementation in Extensions
    * CVE-2026-17758: Heap buffer overflow in Dawn
    * CVE-2026-17732: Inappropriate implementation in SVG
    * CVE-2026-17729: Use after free in V8
    * CVE-2026-17730: Side-channel information leakage in Autofill
    * CVE-2026-17731: Inappropriate implementation in Autofill
    * CVE-2026-17733: Inappropriate implementation in QUIC
    * CVE-2026-17734: Inappropriate implementation in Autofill
    * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
    * CVE-2026-17736: Insufficient validation of untrusted input in WebView
    * CVE-2026-17737: Use after free in Bluetooth
    * CVE-2026-17738: Insufficient validation of untrusted input in Payments
    * CVE-2026-17739: Insufficient policy enforcement in Extensions
    * CVE-2026-17740: Uninitialized Use in ANGLE
    * CVE-2026-17741: Insufficient validation of untrusted input in WebView
    * CVE-2026-17742: Insufficient policy enforcement in Payments
    * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
    * CVE-2026-17744: Inappropriate implementation in File Input
    * CVE-2026-17745: Out of bounds read in Skia
    * CVE-2026-17746: Use after free in GPU
    * CVE-2026-17747: Insufficient validation of untrusted input in Payments
    * CVE-2026-17748: Inappropriate implementation in Extensions
    * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17750: Use after free in ANGLE
    * CVE-2026-17751: Inappropriate implementation in AdFilter
    * CVE-2026-17752: Use after free in Views
    * CVE-2026-17753: Inappropriate implementation in Autofill
    * CVE-2026-17754: Inappropriate implementation in Blink
    * CVE-2026-17755: Incorrect security UI in Extensions
    * CVE-2026-17756: Insufficient policy enforcement in Presentation
    * CVE-2026-17757: Uninitialized Use in Skia
    * CVE-2026-17759: Uninitialized Use in Codecs
    * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
    * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17763: Inappropriate implementation in GPU
    * CVE-2026-17764: Inappropriate implementation in FedCM
    * CVE-2026-17765: Inappropriate implementation in WebProtect
    * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
    * CVE-2026-17767: Insufficient validation of untrusted input in WebView
    * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
    * CVE-2026-17769: Insufficient validation of untrusted input in Cast
    * CVE-2026-17770: Out of bounds read in Media
    * CVE-2026-17771: Uninitialized Use in Skia
    * CVE-2026-17772: Out of bounds read in WebGL
    * CVE-2026-17773: Insufficient validation of untrusted input in Cast
    * CVE-2026-17774: Insufficient validation of untrusted input in Variations
    * CVE-2026-17775: Inappropriate implementation in PresentationAPI
    * CVE-2026-17776: Policy bypass in Receiver
    * CVE-2026-17777: Inappropriate implementation in Autofill
    * CVE-2026-17778: Use after free in Extensions
    * CVE-2026-17779: Inappropriate implementation in Site Isolation
    * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-17781: Inappropriate implementation in Extensions
    * CVE-2026-17782: Incorrect security UI in Chrome for iOS
    * CVE-2026-17783: Inappropriate implementation in Loader
    * CVE-2026-17784: Use after free in Audio
    * CVE-2026-17785: Uninitialized Use in ANGLE
    * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17787: Inappropriate implementation in DevTools
    * CVE-2026-17788: Inappropriate implementation in Blink
    * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17790: Uninitialized Use in ANGLE
    * CVE-2026-17791: Insufficient validation of untrusted input in Payments
    * CVE-2026-17792: Inappropriate implementation in Credential Management
    * CVE-2026-17793: Inappropriate implementation in Messages
    * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
    * CVE-2026-17796: Side-channel information leakage in WebXR
    * CVE-2026-17797: Inappropriate implementation in CSS
    * CVE-2026-17798: Inappropriate implementation in Cast
    * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
    * CVE-2026-17800: Side-channel information leakage in MediaRecording
    * CVE-2026-17801: Out of bounds memory access in ANGLE
    * CVE-2026-17802: Side-channel information leakage in GPU
    * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
    * CVE-2026-17804: Use after free in Media
    * CVE-2026-17805: Insufficient policy enforcement in Glic
    * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17807: Use after free in V8
    * CVE-2026-17808: Uninitialized Use in WebGL
    * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17810: Uninitialized Use in Dawn
    * CVE-2026-17811: Use after free in ANGLE
    * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
    * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17815: Insufficient policy enforcement in GuestView
    * CVE-2026-17816: Inappropriate implementation in Speech
    * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
    * CVE-2026-17818: Inappropriate implementation in Network
    * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
    * CVE-2026-17820: Insufficient policy enforcement in Autofill
    * CVE-2026-17821: Insufficient policy enforcement in Extensions
    * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17823: Insufficient policy enforcement in WebXR
    * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-17825: Insufficient policy enforcement in Passwords
    * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17827: Inappropriate implementation in CSS
    * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17829: Insufficient policy enforcement in Passwords
    * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17832: Use after free in ANGLE
    * CVE-2026-17833: Inappropriate implementation in Passwords
    * CVE-2026-17834: Inappropriate implementation in Passwords
    * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17836: Use after free in V8
    * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17838: Incorrect security UI in Chrome for iOS
    * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17840: Incorrect security UI in Passwords
    * CVE-2026-17841: Race in Chrome for iOS
    * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17843: Inappropriate implementation in CSS
    * CVE-2026-17844: Insufficient validation of untrusted input in Cast
    * CVE-2026-17845: Inappropriate implementation in CSS
    * CVE-2026-17846: Inappropriate implementation in Media
    * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
    * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17850: Inappropriate implementation in Permissions
    * CVE-2026-17851: Side-channel information leakage in Autofill
    * CVE-2026-17852: Inappropriate implementation in Media Router
    * CVE-2026-17853: Inappropriate implementation in DevTools
    * CVE-2026-17854: Insufficient policy enforcement in WebMCP
    * CVE-2026-17855: Race in DevTools
    * CVE-2026-17856: Inappropriate implementation in Network
    * CVE-2026-17857: Inappropriate implementation in Network
    * CVE-2026-17858: Uninitialized Use in WebNN
    * CVE-2026-17859: Side-channel information leakage in Favicons
    * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17861: Insufficient validation of untrusted input in Updater
    * CVE-2026-17862: Use after free in Tracing
    * CVE-2026-17863: Inappropriate implementation in Browser
    * CVE-2026-17864: Inappropriate implementation in Updater
    * CVE-2026-17865: Inappropriate implementation in Crypto
    * CVE-2026-17866: Type Confusion in Tab
    * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17868: Insufficient policy enforcement in USB
    * CVE-2026-17869: Out of bounds read in WebXR
    * CVE-2026-17870: Insufficient validation of untrusted input in Cast
    * CVE-2026-17871: Inappropriate implementation in Passwords
    * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
    * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17875: Use after free in PDFium
    * CVE-2026-17876: Inappropriate implementation in Payments
    * CVE-2026-17877: Inappropriate implementation in Chromoting
    * CVE-2026-17878: Inappropriate implementation in CSS
    * CVE-2026-17879: Inappropriate implementation in Autofill
    * CVE-2026-17880: Inappropriate implementation in Autofill
    * CVE-2026-17881: Use after free in WebXR
    * CVE-2026-17882: Policy bypass in Extensions
    * CVE-2026-17883: Inappropriate implementation in Headless
    * CVE-2026-17884: Object lifecycle issue in WebRTC
    * CVE-2026-17885: Inappropriate implementation in Paint
    * CVE-2026-17886: Use after free in Enterprise
    * CVE-2026-17887: Use after free in TabStrip
    * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
    * CVE-2026-17889: Uninitialized Use in WebXR
    * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17891: Use after free in ANGLE
    * CVE-2026-17892: Inappropriate implementation in WebXR
    * CVE-2026-17893: Insufficient validation of untrusted input in Updater
    * CVE-2026-17894: Use after free in Views
    * CVE-2026-17895: Inappropriate implementation in DataTransfer
    * CVE-2026-17896: Use after free in DevTools
    * CVE-2026-17897: Inappropriate implementation in ORB
    * CVE-2026-17898: Use after free in DevTools
    * CVE-2026-17899: Insufficient policy enforcement in DevTools
    * CVE-2026-17900: Inappropriate implementation in Enterprise
    * CVE-2026-17901: Inappropriate implementation in Sharing
    * CVE-2026-17902: Inappropriate implementation in Editing
    * CVE-2026-17903: Insufficient policy enforcement in Chromecast
    * CVE-2026-17904: Insufficient policy enforcement in NFC
    * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
    * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
    * CVE-2026-17907: Side-channel information leakage in Network
    * CVE-2026-17908: Insufficient validation of untrusted input in Printing
    * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
    * CVE-2026-17910: Insufficient policy enforcement in NFC
    * CVE-2026-17911: Insufficient policy enforcement in SVG
    * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17914: Side-channel information leakage in Skia
    * CVE-2026-17915: Inappropriate implementation in WebView
    * CVE-2026-17916: Insufficient policy enforcement in Settings
    * CVE-2026-17917: Policy bypass in Chrome for iOS
    * CVE-2026-17918: Use after free in Sync
    * CVE-2026-17919: Insufficient policy enforcement in Enterprise
    * CVE-2026-17920: Use after free in V8
    * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17922: Inappropriate implementation in Enterprise
    * CVE-2026-17923: Policy bypass in Enterprise
    * CVE-2026-17924: Use after free in DNS
    * CVE-2026-17925: Inappropriate implementation in Cast
    * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17927: Insufficient policy enforcement in DevTools
    * CVE-2026-17928: Inappropriate implementation in DataTransfer
    * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17931: Inappropriate implementation in DevTools
    * CVE-2026-17932: Use after free in DataTransfer
    * CVE-2026-17933: Inappropriate implementation in DOMStorage
    * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17935: Heap buffer overflow in Codecs
    * CVE-2026-17936: Inappropriate implementation in DevTools
    * CVE-2026-17937: Inappropriate implementation in DevTools
    * CVE-2026-17938: Inappropriate implementation in FullScreen
    * CVE-2026-17939: Inappropriate implementation in Passwords
    * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
    * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17942: Side-channel information leakage in SVG
    * CVE-2026-17943: Inappropriate implementation in Parser
    * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17945: Inappropriate implementation in Navigation
    * CVE-2026-17946: Uninitialized Use in Dawn
    * CVE-2026-17947: Use after free in WebSockets
    * CVE-2026-17948: Type Confusion in V8
    * CVE-2026-17949: Uninitialized Use in GPU
    * CVE-2026-17950: Policy bypass in Safebrowsing
    * CVE-2026-17951: Heap buffer overflow in WebRTC
    * CVE-2026-17952: Inappropriate implementation in V8
    * CVE-2026-17953: Insufficient policy enforcement in WebView
    * CVE-2026-17954: Policy bypass in MHTML
    * CVE-2026-17955: Insufficient validation of untrusted input in Payments
    * CVE-2026-17956: Inappropriate implementation in Scheduling
    * CVE-2026-17957: Inappropriate implementation in CORS
    * CVE-2026-17958: Inappropriate implementation in Views
    * CVE-2026-17959: Inappropriate implementation in Network
    * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17961: Inappropriate implementation in Session
    * CVE-2026-17962: Inappropriate implementation in Blink
    * CVE-2026-17963: Inappropriate implementation in SVG
    * CVE-2026-17964: Incorrect security UI in UI
    * CVE-2026-17965: Incorrect security UI in Chrome for iOS
    * CVE-2026-17966: Inappropriate implementation in Views
    * CVE-2026-17967: Use after free in Chrome for iOS
    * CVE-2026-17968: Uninitialized Use in WebXR
    * CVE-2026-17969: Inappropriate implementation in Passwords
    * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17971: Inappropriate implementation in Frame
    * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17973: Inappropriate implementation in Views
    * CVE-2026-17974: Insufficient policy enforcement in DevTools
    * CVE-2026-17975: Inappropriate implementation in IME
    * CVE-2026-17976: Policy bypass in Extensions
    * CVE-2026-17977: Policy bypass in CSS
    * CVE-2026-17978: Side-channel information leakage in WebCodecs
    * CVE-2026-17979: Race in V8
    * CVE-2026-17980: Inappropriate implementation in UI
    * CVE-2026-17981: Inappropriate implementation in Blink
    * CVE-2026-17982: Insufficient validation of untrusted input in Cast
    * CVE-2026-17983: Incorrect security UI in Global Media Controls
    * CVE-2026-17984: Inappropriate implementation in Browser
    * CVE-2026-17985: Insufficient policy enforcement in Speech
    * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
    * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
    * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17989: Type Confusion in V8
    * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
    * CVE-2026-17991: Insufficient validation of untrusted input in AI
    * CVE-2026-17992: Uninitialized Use in Skia
    * CVE-2026-17993: Race in Updater
    * CVE-2026-17994: Inappropriate implementation in Media
    * CVE-2026-17995: Out of bounds read in Dawn
    * CVE-2026-17996: Inappropriate implementation in Browser
    * CVE-2026-17997: Inappropriate implementation in Passwords
    * CVE-2026-17998: Incorrect security UI in Extensions
    * CVE-2026-17999: Incorrect security UI in PictureInPicture
    * CVE-2026-18000: Insufficient policy enforcement in USB
    * CVE-2026-18001: Inappropriate implementation in WebGL
    * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
    * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18004: Insufficient policy enforcement in Speech
    * CVE-2026-18005: Inappropriate implementation in WebXR
    * CVE-2026-18006: Inappropriate implementation in Google Lens
    * CVE-2026-18007: Inappropriate implementation in Input
    * CVE-2026-18008: Inappropriate implementation in Settings
    * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
    * CVE-2026-18010: Inappropriate implementation in Passwords
    * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18012: Use after free in PDFium
    * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
    * CVE-2026-18015: Inappropriate implementation in Tint
    * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-18017: Use after free in Dawn
    * CVE-2026-18018: Inappropriate implementation in Updater
    * CVE-2026-18019: Side-channel information leakage in Media


author: Than Ngo <than@redhat.com> - 151.0.7922.108-1
changelog:
  - Update to 151.0.7922.108
    * CVE-2026-19137: Use after free in WebGL
    * CVE-2026-19138: Heap buffer overflow in CrashReporting
    * CVE-2026-19139: Race in CredentialProvider
    * CVE-2026-19140: Use after free in GPU
    * CVE-2026-19141: Use after free in Resources
    * CVE-2026-19142: Use after free in Views
    * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
    * CVE-2026-19144: Use after free in HTML
    * CVE-2026-19145: Use after free in Translate
    * CVE-2026-19146: Uninitialized Use in GPU
    * CVE-2026-19147: Use after free in Aura
    * CVE-2026-19148: Out of bounds write in GPU
    * CVE-2026-19149: Use after free in Aura
    * CVE-2026-19150: Inappropriate implementation in V8
    * CVE-2026-19151: Use after free in V8
    * CVE-2026-19152: Inappropriate implementation in Navigation
    * CVE-2026-19153: Insufficient validation of untrusted input in Workers
    * CVE-2026-19154: Use after free in Skia
    * CVE-2026-19155: Use after free in Payments
    * CVE-2026-19156: Heap buffer overflow in Base
    * CVE-2026-19157: Out of bounds write in ANGLE
    * CVE-2026-19158: Use after free in Views
    * CVE-2026-19159: Use after free in Views
    * CVE-2026-19160: Uninitialized Use in Skia
    * CVE-2026-19161: Uninitialized Use in Skia
    * CVE-2026-19162: Out of bounds write in V8
    * CVE-2026-19163: Use after free in Media
    * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
    * CVE-2026-19165: Use after free in Extensions
    * CVE-2026-19166: Use after free in Web Authentication
    * CVE-2026-19167: Integer overflow in GPU
    * CVE-2026-19168: Inappropriate implementation in V8
    * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
    * CVE-2026-19170: Use after free in WebGL
    * CVE-2026-19171: Use after free in Media
    * CVE-2026-19172: Use after free in Views
    * CVE-2026-19173: Out of bounds write in Skia
    * CVE-2026-19174: Integer overflow in V8
    * CVE-2026-19175: Use after free in Payments
    * CVE-2026-19176: Use after free in Skia
    * CVE-2026-19177: Insufficient validation of untrusted input in UI


author: Than Ngo <than@redhat.com> - 151.0.7922.137-1
changelog:
  - Update to 151.0.7922.137
    * CVE-2026-19556: Use after free in V8
    * CVE-2026-19557: Use after free in TabStrip
    * CVE-2026-19558: Use after free in Extensions
    * CVE-2026-19559: Use after free in HTML
    * CVE-2026-19560: Use after free in Blink


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Pavel Raiskup <praiskup@redhat.com> 1.3-1
changelog:
  - ignore unicode errors some commands' output
  - custom method - do not rely on working `/bin/su` in chroot
  - migrate os.listdir() to os.scandir() to increase performance
  - do not build package for i686 architecture
  - skip build only there are no unexpanded macros in ExclusiveArch/ExcludeArch


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Improve robustness and cooperation with backend
  - Pipe errors/warning out to builder-live.log
  - Make sure we use the latest dist-git-client


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Do not require DNF4 packages and instead require DNF5 packages
  - Extract Exclu*Arch/BuildArch for all targets
  - Add dependency on the which command
  - Use Tito to generate component.__version__


author: Jakub Kadlcik <frostyx@email.cz> 1.9-1
changelog:
  - Add direct RPM upload build type
  - Move URLs from pagure to forgejo
  - Do not build-depend on scl-utils
  - Fix typo, redundant mkdir, and file handle leak
  - Fix container-based unit test workflow
  - Improve copr-rpmbuild man page
  - Add markup to copr-rpmbuild man page
  - Avoid ugly traceback for invalid --task-url and -r
  - Open spec file as read-only


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.4-1
changelog:
  - Fix copr-cli download for Pulp projects
  - Add API endpoint for generating a new token
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Fix download-build for manual createrepo Pulp projects
  - Make sure new-api-token updates expiration token
  - Don't traceback new-api-token for default config
  - Fix download-build from PULP with --rpms
  - Fix script-repos not being saved at all for custom pkgs
  - Use a URL that would be available before the Pulp migration
  - Use build_proxy.get_built_packages to figure out package NEVRAs
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__
  - Colorize build statuses


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Add --chroot-denylist to add/edit-package commands
  - Upload rpm to python and cli
  - Add --with-deps to buildpypi
  - Support unix file pattern matching in --chroot and --exclude-chroot
  - Require the rich package
  - Document permission commands in man page
  - Fix container-based unit test workflow
  - Fix AttributeError: module 'pkgutil' has no attribute 'get_loader'


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Pavel Raiskup <pavel@raiskup.cz> 1.120-1
changelog:
  - Update RPM-GPG-KEY-openSUSE-2022
  - add Teams for Linux repository key
  - add Oracle Linux 10 key
  - Add NetBSD security officer key
  - update copr keys
  - Added EndeavourOS, Tuxedo OS, and Linux Mint keys


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.98.0-1
changelog:
  - update to 2.98.0
  - resolves: rhbz#2403136 (CVE-2025-11579), rhbz#2420569 (CVE-2025-47913),
    rhbz#2421867 (CVE-2025-66564), rhbz#2432197 (CVE-2026-23831),
    rhbz#2433101 (CVE-2026-23991), rhbz#2433104 (CVE-2026-23992),
    rhbz#2433535 (CVE-2026-24117), rhbz#2433572 (CVE-2026-24137),
    rhbz#2434246 (CVE-2026-24686), rhbz#2452365 (CVE-2026-32285),
    rhbz#2454524 (CVE-2026-34165), rhbz#2454525 (CVE-2026-33762),
    rhbz#2455638 (CVE-2026-34986)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - mock: Use umask 0022 instead of 0002 to avoid strange permissions (ngompa@velocitylimitless.com)
  - expand_spec plugin: generating expanded-spec.txt in postdeps hook (yzhu@redhat.com)
  - do not fail (not just) hermetic builds for missing resolv.conf
  - use skopeo for hermetic bootstrap images (tkopecek@redhat.com)
  - support yum for hermetic build (tkopecek@redhat.com)
  - allow access to the buildroot binary RPMs even in hermetic builds (tkopecek@redhat.com)
  - adapt mock to Changes/droppingOfCertPemFile
  - file_util: improve rmtree performance (#1672) (Gerasimov.N.V)
  - disable traceLog() wrapper (will be removed)
  - `mock --scrub=all` now correctly backs up successful builds from the buildroot (sergio@serjux.com)
  - update subscription-manager instructions (msuchy@redhat.com)
  - configs: Switch openSUSE Tumbleweed to DNF5 (ngompa@opensuse.org)
  - depend on DNF5 for EL11+ distributions (ngompa@centosproject.org)
  - depend on DNF5 for Mageia 10+ and Cauldron (ngompa@mageia.org)
  - select personality for RISC-V DNF transactions
  - document --scrub=bootstrap (negativo17@gmail.com)
  - unbreq supports `--isolation=simple` and `--no-bootstrap-chroot` (marian.koncek@mailbox.org)
  - unbreq plugin no longer crashes for `(foo if bar)` build deps (marian.koncek@mailbox.org)
  - unbreq performance has been significantly improved through caching (marian.koncek@mailbox.org)
  - unbreq logs standard outputs of failed commands (mkoncek@users.noreply.github.com)


author: Pavel Raiskup <pavel@raiskup.cz> 6.8-1
changelog:
  - bump Conflicts to mock-core-configs < 45.1
  - Document oci_platform_map as a temporary workaround
  - Allow --disable-plugin buildroot_lock with --calculate-build-dependencies
  - buildroot_lock: don't inspect bootstrap image when not used
  - No --allowerasing for `dnf5 list`
  - Include support for polkit (rajibade@amazon.com)
  - Add support for isolated %check phase
  - Add pivot_root_chroot option to enable user namespaces (tkopecek@redhat.com)
  - fix: add HTTP 503 to retry status_forcelist in mock-hermetic-repo (scoheb@gmail.com)
  - unbreq plugin: disable SRPM caching (marian.koncek@mailbox.org)
  - unbreq plugin: do not treat not installed packages as unused (marian.koncek@mailbox.org)
  - Add system monitor plugin  (#1748) (yaneti@declera.com)
  - fix: reload uidManager with chrootuid/chrootgid from config
  - Don't use --allowerasing with 'dnf download' (logans@cottsay.net)
  - fix: add newline at the end of each line of available_pkgs.log (msuchy@redhat.com)
  - feat: remove pkgid from package_state plugin output (msuchy@redhat.com)
  - add rpm as deps to tox tests (msuchy@redhat.com)
  - fix: preserve readable permissions when copying spec files into chroot (#1300) (msuchy@redhat.com)
  - fix: add timeout to podman pull to prevent indefinite hangs (#1680) (msuchy@redhat.com)
  - bash-completion: localrepo takes a directory arg (linux@cmadams.net)
  - bash-completion: chain doesn't take an config arg (linux@cmadams.net)
  - fix: --verbose no longer duplicates build log into root log (#1302) (msuchy@redhat.com)
  - shadow_utils: useradd --root for newer systems (praiskup@redhat.com)
  - generate available_pkgs.log for dnf5/dnf4 package managers (msuchy@redhat.com)
  - fix: preserve dnf.conf/yum.conf timestamps when content is unchanged (msuchy@redhat.com)
  - feat: add OCI platform support for x86_64 sub-architecture containers (andrew.lukoshko@gmail.com)
  - Decode file:// repo paths before bootstrap bind mount (lukas.lipinsky@oracle.com)
  - Fix the tool check (tkopecek@redhat.com)
  - Refactor NS resolver logic for clarity and consistency


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Pavel Raiskup <pavel@raiskup.cz> 44.4-1
changelog:
  - Fixes #1761: Add Fedora Rawhide RISC-V (jmontleo@redhat.com)
  - configs: add Azure Linux 4.0 beta configuration (tobiasb@microsoft.com)


author: Pavel Raiskup <pavel@raiskup.cz> 45.1-1
changelog:
  - branch Fedora 45 from Rawhide
  - Document oci_platform_map as a temporary workaround
  - update openEuler 24.03 LTS chroot to SP4 and fix source metalink (pkwarcraft@gmail.com)
  - add Extensions repos to ELN (yselkowi@redhat.com)
  - Add missing fedora-45-riscv64.cfg (abologna@redhat.com)
  - Use cdn.opensuse.org for openSUSE baseurls. (negativo17@gmail.com)
  - update Mageia configs (wally@mageia.org)


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Don't traceback new-api-token for default config
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__


author: Scott K Logan <logans@cottsay.net> - 0.18.1-1
changelog:
  - Update to 0.18.1 (rhbz#2300129)
  - Drop RHEL 7 spec support
  - Use boolean operators for backwards compatibility package dependencies


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Jakub Kadlcik <frostyx@email.cz> 1.6-1
changelog:
  - Do not traceback in SafeRequest if log= is not set
  - Use SafeRequest.timeout only as a timeout per request
  - use Tito to generate component.__version__


author: Jakub Kadlcik <frostyx@email.cz> 1.8-1
changelog:
  - Add direct RPM upload build type
  - Efactor lock() function into Lock class
  - Fair FIFO locking via Redis queue
  - Fix container-based unit test workflow


author: Michel Lind <salimma@fedoraproject.org> - 0.62.1-1
changelog:
  - Update to 0.62.1 for ability to enforce SSO login/signups
  - Generate extras subpackages
  - Enforce that the license file is shipped


author: Peter Bieringer <pb@bieringer.de>
changelog:
  - Add missing requirement InfCloud-fontware to InfCloud
  - Extend SELinux policy for access to /run/systemd/userdb/io.systemd.DynamicUser on start


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Dominik Mierzejewski <dominik@greysector.net> - 0.25.0-2
changelog:
  - disable cffi backend to fix build on EPEL9 (resolves rhbz#2483911)
  - enable tests
  - drop unnecessary patch


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.0-2
changelog:
  - Trivially updated Apache-2.0 license text as merged upstream
  - This just adds an extra newline; nothing significant changes


