[rpms/chromium] epel9-next: - Update to 146.0.7680.177

[rpms/chromium] epel9-next: - Update to 146.0.7680.177

[Than Ngo]

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : epel9-next
            Commit : d0205978126ff32fee7da2efeac509282aa7089d
            Author : Than Ngo <than@redhat.com>
            Date   : 2026-04-01T10:52:38+02:00
            Stats  : +26/-24 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/d0205978126ff32fee7da2efeac509282aa7089d?branch=epel9-next

            Log:
            - Update to 146.0.7680.177
  * High CVE-2026-5273: Use after free in CSS
  * High CVE-2026-5272: Heap buffer overflow in GPU
  * High CVE-2026-5274: Integer overflow in Codecs
  * High CVE-2026-5275: Heap buffer overflow in ANGLE
  * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * High CVE-2026-5277: Integer overflow in ANGLE
  * High CVE-2026-5278: Use after free in Web MIDI
  * High CVE-2026-5279: Object corruption in V8
  * High CVE-2026-5280: Use after free in WebCodecs
  * High CVE-2026-5281: Use after free in Dawn
  * High CVE-2026-5282: Out of bounds read in WebCodecs
  * High CVE-2026-5283: Inappropriate implementation in ANGLE
  * High CVE-2026-5284: Use after free in Dawn
  * High CVE-2026-5285: Use after free in WebGL
  * High CVE-2026-5286: Use after free in Dawn
  * High CVE-2026-5287: Use after free in PDF
  * High CVE-2026-5288: Use after free in WebView
  * High CVE-2026-5289: Use after free in Navigation
  * High CVE-2026-5290: Use after free in Compositing
  * Medium CVE-2026-5291: Inappropriate implementation in WebGL
  * Medium CVE-2026-5292: Out of bounds read in WebCodecs
- removed ppc64le-build-error patch that is merged in upstream

---
diff --git a/chromium-146-ppc64le-build-error.patch b/chromium-146-ppc64le-build-error.patch
deleted file mode 100644
index 9f73d6b..0000000
--- a/chromium-146-ppc64le-build-error.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-Fix build error on ppc64le
-
- error: out-of-line definition of 'ProcessARateVector' does not match any declaration in 'blink::Delay'
-
-diff -up chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc.me chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc
---- chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc.me	2026-03-24 15:38:50.300720592 +0100
-+++ chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc	2026-03-24 15:54:07.159563910 +0100
-@@ -102,8 +102,8 @@ double Delay::DelayTime(float sample_rat
- #if !(defined(ARCH_CPU_X86_FAMILY) || defined(CPU_ARM_NEON))
- // Default scalar versions if simd/neon are not available.
- std::tuple<size_t, size_t> Delay::ProcessARateVector(
--    float* destination,
--    uint32_t frames_to_process) const {
-+    base::span<float> destination,
-+    size_t frames_to_process) const {
-   // We don't have a vectorized version, so just do nothing and return the 0 to
-   // indicate no frames processed and return the current write_index_.
-   return std::make_tuple(0, write_index_);

diff --git a/chromium.spec b/chromium.spec
index 4b49274..89829f1 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -262,7 +262,7 @@
 %endif
 
 Name:	chromium
-Version: 146.0.7680.164
+Version: 146.0.7680.177
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -491,9 +491,6 @@ Patch417: 0001-add-xnn-ppc64el-support.patch
 Patch418: 0002-regenerate-xnn-buildgn.patch
 Patch419: 0009-sandbox-ignore-byte-span-error.patch
 
-# Fix FTBFS, error: out-of-line definition of 'ProcessARateVector' does not match any declaration in 'blink::Delay'
-Patch420: chromium-146-ppc64le-build-error.patch
-
 # flatpak sandbox patches from
 # https://github.com/flathub/org.chromium.Chromium/tree/master/patches/chromium
 Patch500: flatpak-Add-initial-sandbox-support.patch
@@ -1201,7 +1198,6 @@ Qt6 UI for chromium.
 %patch -P417 -p1 -b .0001-add-xnn-ppc64el-support
 %patch -P418 -p1 -b .0002-regenerate-xnn-buildgn
 %patch -P419 -p1 -b .0009-sandbox-ignore-byte-span-error
-%patch -P420 -p1 -b .fix-ppc64le-build-error
 %endif
 
 %if 0%{?flatpak}
@@ -1863,6 +1859,30 @@ fi
 %endif
 
 %changelog
+* Wed Apr 01 2026 Than Ngo <than@redhat.com> - 146.0.7680.177-1
+- Update to 146.0.7680.177
+  * High CVE-2026-5273: Use after free in CSS
+  * High CVE-2026-5272: Heap buffer overflow in GPU
+  * High CVE-2026-5274: Integer overflow in Codecs
+  * High CVE-2026-5275: Heap buffer overflow in ANGLE
+  * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
+  * High CVE-2026-5277: Integer overflow in ANGLE
+  * High CVE-2026-5278: Use after free in Web MIDI
+  * High CVE-2026-5279: Object corruption in V8
+  * High CVE-2026-5280: Use after free in WebCodecs
+  * High CVE-2026-5281: Use after free in Dawn
+  * High CVE-2026-5282: Out of bounds read in WebCodecs
+  * High CVE-2026-5283: Inappropriate implementation in ANGLE
+  * High CVE-2026-5284: Use after free in Dawn
+  * High CVE-2026-5285: Use after free in WebGL
+  * High CVE-2026-5286: Use after free in Dawn
+  * High CVE-2026-5287: Use after free in PDF
+  * High CVE-2026-5288: Use after free in WebView
+  * High CVE-2026-5289: Use after free in Navigation
+  * High CVE-2026-5290: Use after free in Compositing
+  * Medium CVE-2026-5291: Inappropriate implementation in WebGL
+  * Medium CVE-2026-5292: Out of bounds read in WebCodecs
+
 * Tue Mar 24 2026 Than Ngo <than@redhat.com> - 146.0.7680.164-1
 - Update to 146.0.7680.164
   * High CVE-2026-4673: Heap buffer overflow in WebAudio

diff --git a/sources b/sources
index 3a665cc..c8198b4 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (rollup-linux-arm64-gnu-4.22.4.tgz) = 01d3d1a0d8b734a54ba2508dfd2a7817837577df1ce120671cc2a82ee886e915e0a19e2c965b1eb868a8b33ba69cf1a63ccd8eeea6805ff20975e0d4f1fdba03
 SHA512 (rollup-linux-powerpc64le-gnu-4.22.4.tgz) = dda5422bdc5f596d68190a53b182493c5e9b7e959f85b46785d97285a936662c852c369acb3d043f98fd5754552c003196658a4c37d2f70c91c98de1be13e83a
 SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-146.0.7680.164-clean.tar.xz) = 339d5d48a6b1b607bdb0f7af0a0d3b01af064ba2239cb5dd6d92972f3a550769c9737bc62188317b05e517a4717bc3f74d759b1cfe8aba5cdfd58928294d4c1e
+SHA512 (chromium-146.0.7680.177-clean.tar.xz) = f6d365e61c38ff214db2d4daeab302fbf4053253d8b249a22d248d56d7406bab7b60725a21cc0b21fe08970820034951ab857c0b0952549984005eaf53a11b0f