public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Than Ngo <than@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/chromium] f44: - Update to 150.0.7871.128
Date: Mon, 20 Jul 2026 14:08:24 GMT	[thread overview]
Message-ID: <178455650457.1.13163682259166717192.rpms-chromium-10feda2ae28e@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : f44
            Commit : 10feda2ae28ecdf19f681af3a96729195ce7ea96
            Author : Than Ngo <than@redhat.com>
            Date   : 2026-07-20T15:43:10+02:00
            Stats  : +14/-10 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/10feda2ae28ecdf19f681af3a96729195ce7ea96?branch=f44

            Log:
            - Update to 150.0.7871.128
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura
- Fix rhbz#2501811, Drop AI policy which breaks DoH settings

---
diff --git a/chromium.spec b/chromium.spec
index dc037a5..071baf5 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -271,8 +271,8 @@
 %endif
 
 Name:	chromium
-Version: 150.0.7871.124
-Release: 2%{?dist}
+Version: 150.0.7871.128
+Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
 License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -562,8 +562,6 @@ Source12: node-%{nodejs_version}-stripped.tar.gz
 Source13: nodejs-sources.sh
 BuildRequires: openssl-devel
 %endif
-# Disable AI Mode settings
-Source14: disable-ai.json
 
 BuildRequires: clang
 BuildRequires: clang-tools-extra
@@ -1808,7 +1806,6 @@ fi
 %dir %{chromium_path}/PrivacySandboxAttestationsPreloaded/
 %config(noreplace) %{_sysconfdir}/%{name}/chromium.conf
 %config %{_sysconfdir}/%{name}/master_preferences
-%config %{_sysconfdir}/%{name}/policies/managed/disable-ai.json
 %{_bindir}/chromium-browser
 %{chromium_path}/chrome_*.pak
 %{chromium_path}/chrome_crashpad_handler
@@ -1928,6 +1925,17 @@ fi
 %endif
 
 %changelog
+* Mon Jul 20 2026 Than Ngo <than@redhat.com> - 150.0.7871.128-1
+- Update to 150.0.7871.128
+  * CVE-2026-15899: Use after free in CameraCapture
+  * CVE-2026-15900: Use after free in GPU
+  * CVE-2026-15901: Use after free in Network
+  * CVE-2026-15902: Use after free in Cast
+  * CVE-2026-15903: Out of bounds read and write in V8
+  * CVE-2026-15904: Use after free in Ozone
+  * CVE-2026-15905: Use after free in Aura
+- Fix rhbz#2501811, Drop AI policy which breaks DoH settings
+
 * Wed Jul 15 2026 Fedora Release Engineering <releng@fedoraproject.org> - 150.0.7871.124-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
 

diff --git a/disable-ai.json b/disable-ai.json
deleted file mode 100644
index b8bf37a..0000000
--- a/disable-ai.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "GenAILocalFoundationalModelSettings": 1,
-  "AIModeSettings": 2
-}

diff --git a/sources b/sources
index 6a96ef4..1927acd 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-150.0.7871.124-clean.tar.xz) = f7d0c5297f64bc13098f6f79105050bf38bb84c764143f5d3c425ce73234189cfe3c201b2b933cd1b7423ea8c16ccd7c0b4c32978f03d8fe261326453d77de5d
+SHA512 (chromium-150.0.7871.128-clean.tar.xz) = 3e3d3112b860c3c7ba2e59672492769b261b5433a6dfa6e41c1706b5049bf0a678604387bcdba2578a34c6f805b7c935d6db7c42e572b1ed36ce366dd76b2065

                 reply	other threads:[~2026-07-20 14:08 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178455650457.1.13163682259166717192.rpms-chromium-10feda2ae28e@fedoraproject.org \
    --to=than@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox