[rpms/chromium] epel9-next: - Update to 147.0.7727.137

[rpms/chromium] epel9-next: - Update to 147.0.7727.137

[Than Ngo]

         A new commit has been pushed.

         Repo   : rpms/chromium
         Branch : epel9-next
         Commit : f0fb8b1f0193395b8b096cd950a943cfc2c4f0dc
         Author : Than Ngo <than@redhat.com>
         Date   : 2026-04-29T09:28:13+02:00
         Stats  : +37/-4 in 2 file(s)
         URL    : https://src.fedoraproject.org/rpms/chromium/c/f0fb8b1f0193395b8b096cd950a943cfc2c4f0dc?branch=epel9-next

         Log:
         - Update to 147.0.7727.137
* Critical CVE-2026-7363: Use after free in Canvas
* Critical CVE-2026-7361: Use after free in iOS
* Critical CVE-2026-7344: Use after free in Accessibility
* Critical CVE-2026-7343: Use after free in Views
* High CVE-2026-7333: Use after free in GPU
* High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
* High CVE-2026-7359: Use after free in ANGLE
* High CVE-2026-7358: Use after free in Animation
* High CVE-2026-7334: Use after free in Views
* High CVE-2026-7357: Use after free in GPU
* High CVE-2026-7356: Use after free in Navigation
* High CVE-2026-7354: Out of bounds read and write in Angle
* High CVE-2026-7353: Heap buffer overflow in Skia
* High CVE-2026-7352: Use after free in Media
* High CVE-2026-7351: Race in MHTML
* High CVE-2026-7350: Use after free in WebMIDI
* High CVE-2026-7349: Use after free in Cast
* High CVE-2026-7348: Use after free in Codecs
* High CVE-2026-7335: Use after free in media
* High CVE-2026-7336: Use after free in WebRTC
* High CVE-2026-7337: Type Confusion in V8
* High CVE-2026-7347: Use after free in Chromoting
* High CVE-2026-7346: Inappropriate implementation in Tint
* High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
* High CVE-2026-7338: Use after free in Cast
* High CVE-2026-7342: Use after free in WebView
* High CVE-2026-7341: Use after free in WebRTC
* Medium CVE-2026-7339: Heap buffer overflow in WebRTC
* Medium CVE-2026-7340: Integer overflow in ANGLE
* Medium CVE-2026-7355: Use after free in Media

---
diff --git a/chromium.spec b/chromium.spec
index 7a241b8..c1a8e0e 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -262,8 +262,8 @@
 %endif
 
 Name:	chromium
-Version: 147.0.7727.116
-Release: 2%{?dist}
+Version: 147.0.7727.137
+Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
 License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -1162,7 +1162,7 @@ Qt6 UI for chromium.
 %patch -P358 -p1 -b .rust-clang_lib
 
 %if  0%{?fedora} > 41 || 0%{?rhel} > 10
-%patch -P359 -p1 -b .ftvfs-with-rustc-1.95
+%patch -P359 -p1 -b .ftbfs-with-rustc-1.95
 %endif
 
 %ifarch ppc64le
@@ -1867,6 +1867,39 @@ fi
 %endif
 
 %changelog
+* Wed Apr 29 2026 Than Ngo <than@redhat.com> - 147.0.7727.137-1
+- Update to 147.0.7727.137
+   * Critical CVE-2026-7363: Use after free in Canvas
+   * Critical CVE-2026-7361: Use after free in iOS
+   * Critical CVE-2026-7344: Use after free in Accessibility
+   * Critical CVE-2026-7343: Use after free in Views
+   * High CVE-2026-7333: Use after free in GPU
+   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
+   * High CVE-2026-7359: Use after free in ANGLE
+   * High CVE-2026-7358: Use after free in Animation
+   * High CVE-2026-7334: Use after free in Views
+   * High CVE-2026-7357: Use after free in GPU
+   * High CVE-2026-7356: Use after free in Navigation
+   * High CVE-2026-7354: Out of bounds read and write in Angle
+   * High CVE-2026-7353: Heap buffer overflow in Skia
+   * High CVE-2026-7352: Use after free in Media
+   * High CVE-2026-7351: Race in MHTML
+   * High CVE-2026-7350: Use after free in WebMIDI
+   * High CVE-2026-7349: Use after free in Cast
+   * High CVE-2026-7348: Use after free in Codecs
+   * High CVE-2026-7335: Use after free in media
+   * High CVE-2026-7336: Use after free in WebRTC
+   * High CVE-2026-7337: Type Confusion in V8
+   * High CVE-2026-7347: Use after free in Chromoting
+   * High CVE-2026-7346: Inappropriate implementation in Tint
+   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
+   * High CVE-2026-7338: Use after free in Cast
+   * High CVE-2026-7342: Use after free in WebView
+   * High CVE-2026-7341: Use after free in WebRTC
+   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
+   * Medium CVE-2026-7340: Integer overflow in ANGLE
+   * Medium CVE-2026-7355: Use after free in Media
+
 * Sun Apr 26 2026 Than Ngo <than@redhat.com> - 147.0.7727.116-2
 - Fix FTBFS with rust 1.95
 - Backport the upstream fix GL native pixmap import support reset in GpuInit

diff --git a/sources b/sources
index b1334fe..bcb9e4a 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (rollup-linux-arm64-gnu-4.22.4.tgz) = 01d3d1a0d8b734a54ba2508dfd2a7817837577df1ce120671cc2a82ee886e915e0a19e2c965b1eb868a8b33ba69cf1a63ccd8eeea6805ff20975e0d4f1fdba03
 SHA512 (rollup-linux-powerpc64le-gnu-4.22.4.tgz) = dda5422bdc5f596d68190a53b182493c5e9b7e959f85b46785d97285a936662c852c369acb3d043f98fd5754552c003196658a4c37d2f70c91c98de1be13e83a
 SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-147.0.7727.116-clean.tar.xz) = aed20a35d1877ca66846f1fa73f6f95ecb24c5c2dfed7a28c56cfb6edc55619637ffa0c047322b4ef50eea43adc5d902a68508c9b6faf51e64d4225b2785bebc
+SHA512 (chromium-147.0.7727.137-clean.tar.xz) = 29e78bdbc64c90ae1953f0fa49ac1542dcdda23c7db27232297bcc3846303760d43ea54c2f0aa1987d40087d09599a8da2cce5804ab8eb4fc0459fbce3870f34