public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Than Ngo <than@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/chromium] epel9: - Update to 150.0.7871.114
Date: Thu, 09 Jul 2026 09:51:08 GMT [thread overview]
Message-ID: <178359066869.1.2515376505679674610.rpms-chromium-dff462244bbd@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9
Commit : dff462244bbda010b2bc103a12b16f356e4bc3a8
Author : Than Ngo <than@redhat.com>
Date : 2026-07-09T10:32:42+02:00
Stats : +32/-2 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/dff462244bbda010b2bc103a12b16f356e4bc3a8?branch=epel9
Log:
- Update to 150.0.7871.114
* CVE-2026-15112: Use after free in Ozone
* CVE-2026-15129: Use after free in Views
* CVE-2026-15132: Uninitialized Use in V8
* CVE-2026-15133: Use after free in InterestGroups
* CVE-2026-15108: Integer overflow in Extensions API
* CVE-2026-15109: Uninitialized Use in ANGLE
* CVE-2026-15110: Use after free in Extensions
* CVE-2026-15111: Use after free in Views
* CVE-2026-15113: Use after free in Autofill
* CVE-2026-15114: Out of bounds read and write in Codecs
* CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
* CVE-2026-15116: Use after free in Actor
* CVE-2026-15117: Use after free in Payments
* CVE-2026-15118: Use after free in Input
* CVE-2026-15119: Inappropriate implementation in GetUserMedia
* CVE-2026-15120: Use after free in Core
* CVE-2026-15121: Use after free in WebRTC
* CVE-2026-15122: Insufficient validation of untrusted input in Codecs
* CVE-2026-15123: Insufficient data validation in DOM
* CVE-2026-15124: Insufficient policy enforcement in Passwords
* CVE-2026-15125: Inappropriate implementation in Forms
* CVE-2026-15126: Use after free in Forms
* CVE-2026-15127: Inappropriate implementation in WebGL
* CVE-2026-15128: Inappropriate implementation in Forms
* CVE-2026-15130: Insufficient policy enforcement in Navigation
* CVE-2026-15107: Use after free in IndexedDB
* CVE-2026-15131: Insufficient data validation in Navigation
---
diff --git a/chromium.spec b/chromium.spec
index 9be8d2f..87ac569 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -271,7 +271,7 @@
%endif
Name: chromium
-Version: 150.0.7871.100
+Version: 150.0.7871.114
Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
@@ -1922,6 +1922,36 @@ fi
%endif
%changelog
+* Thu Jul 09 2026 Than Ngo <than@redhat.com> - 150.0.7871.114-1
+- Update to 150.0.7871.114
+ * CVE-2026-15112: Use after free in Ozone
+ * CVE-2026-15129: Use after free in Views
+ * CVE-2026-15132: Uninitialized Use in V8
+ * CVE-2026-15133: Use after free in InterestGroups
+ * CVE-2026-15108: Integer overflow in Extensions API
+ * CVE-2026-15109: Uninitialized Use in ANGLE
+ * CVE-2026-15110: Use after free in Extensions
+ * CVE-2026-15111: Use after free in Views
+ * CVE-2026-15113: Use after free in Autofill
+ * CVE-2026-15114: Out of bounds read and write in Codecs
+ * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
+ * CVE-2026-15116: Use after free in Actor
+ * CVE-2026-15117: Use after free in Payments
+ * CVE-2026-15118: Use after free in Input
+ * CVE-2026-15119: Inappropriate implementation in GetUserMedia
+ * CVE-2026-15120: Use after free in Core
+ * CVE-2026-15121: Use after free in WebRTC
+ * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
+ * CVE-2026-15123: Insufficient data validation in DOM
+ * CVE-2026-15124: Insufficient policy enforcement in Passwords
+ * CVE-2026-15125: Inappropriate implementation in Forms
+ * CVE-2026-15126: Use after free in Forms
+ * CVE-2026-15127: Inappropriate implementation in WebGL
+ * CVE-2026-15128: Inappropriate implementation in Forms
+ * CVE-2026-15130: Insufficient policy enforcement in Navigation
+ * CVE-2026-15107: Use after free in IndexedDB
+ * CVE-2026-15131: Insufficient data validation in Navigation
+
* Wed Jul 08 2026 Than Ngo <than@redhat.com> - 150.0.7871.100-1
- Update to 150.0.7871.100
- Fix installation issue caused by the hard link in locales
diff --git a/sources b/sources
index 10a4c77..57a651f 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-150.0.7871.100-clean.tar.xz) = 8de9e72a1afed8b49de7baa428c5037c9914b6352d943c73d2ccb083488f6d94735801e23c044f342367d8cff0f7b40df912facda0820b73de45b706c40530e4
+SHA512 (chromium-150.0.7871.114-clean.tar.xz) = 6959284a198f4690e79c047d36209f0809a0a1ecea3eb0fa0d9fb8c54b3bd7756e5563de3d011c298c45c3619ddf36d4e141f81ceb7f6ff1a084d2afe83c5bb1
reply other threads:[~2026-07-09 9:51 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178359066869.1.2515376505679674610.rpms-chromium-dff462244bbd@fedoraproject.org \
--to=than@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox