public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: Add CVEs in changelog
@ 2026-08-07 16:09 Than Ngo
0 siblings, 0 replies; 3+ messages in thread
From: Than Ngo @ 2026-08-07 16:09 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : 44503fc3bf73721e282b91569c05d19967d30a30
Author : Than Ngo <than@redhat.com>
Date : 2026-05-21T08:35:46+02:00
Stats : +16/-0 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/44503fc3bf73721e282b91569c05d19967d30a30?branch=epel9-next
Log:
Add CVEs in changelog
* CVE-2026-9111: Use after free in WebRTC
* CVE-2026-9110: Inappropriate implementation in UI
* CVE-2026-9112: Use after free in GPU
* CVE-2026-9113: Out of bounds read in GPU
* CVE-2026-9114: Use after free in QUIC
* CVE-2026-9115: Insufficient policy enforcement in Service Worker
* CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
* CVE-2026-9117: Type Confusion in GFX
* CVE-2026-9118: Use after free in XR
* CVE-2026-9119: Heap buffer overflow in WebRTC
* CVE-2026-9120: Use after free in WebRTC
* CVE-2026-9126: Use after free in DOM
* CVE-2026-9121: Out of bounds read in GPU
* CVE-2026-9122: Out of bounds read in GPU
* CVE-2026-9123: Heap buffer overflow in Chromecast
* CVE-2026-9124: Insufficient validation of untrusted input in Input
---
diff --git a/chromium.spec b/chromium.spec
index 3f289ae..2a1d7d5 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -1893,6 +1893,22 @@ fi
%changelog
* Wed May 20 2026 Than Ngo <than@redhat.com> - 148.0.7778.178-1
- Update to 148.0.7778.178
+ * CVE-2026-9111: Use after free in WebRTC
+ * CVE-2026-9110: Inappropriate implementation in UI
+ * CVE-2026-9112: Use after free in GPU
+ * CVE-2026-9113: Out of bounds read in GPU
+ * CVE-2026-9114: Use after free in QUIC
+ * CVE-2026-9115: Insufficient policy enforcement in Service Worker
+ * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
+ * CVE-2026-9117: Type Confusion in GFX
+ * CVE-2026-9118: Use after free in XR
+ * CVE-2026-9119: Heap buffer overflow in WebRTC
+ * CVE-2026-9120: Use after free in WebRTC
+ * CVE-2026-9126: Use after free in DOM
+ * CVE-2026-9121: Out of bounds read in GPU
+ * CVE-2026-9122: Out of bounds read in GPU
+ * CVE-2026-9123: Heap buffer overflow in Chromecast
+ * CVE-2026-9124: Insufficient validation of untrusted input in Input
- Backport upstream patches to improve auto dark image inversion logic
- Update default chromium browser config
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [rpms/chromium] epel9-next: Add CVEs in changelog
@ 2026-08-07 16:08 Than Ngo
0 siblings, 0 replies; 3+ messages in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : df91226ef27c12ce770b59394c317400de93d639
Author : Than Ngo <than@redhat.com>
Date : 2026-04-09T08:55:59+02:00
Stats : +61/-1 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/df91226ef27c12ce770b59394c317400de93d639?branch=epel9-next
Log:
Add CVEs in changelog
---
diff --git a/chromium.spec b/chromium.spec
index 30bf5a4..b56c83b 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -1857,8 +1857,68 @@ fi
%endif
%changelog
-* Wed Apr 08 2026 Than Ngo <than@redhat.com> - 147.0.7727.55-1
+* Thu Apr 09 2026 Than Ngo <than@redhat.com> - 147.0.7727.55-1
- Update to 147.0.7727.55
+ * Critical CVE-2026-5858: Heap buffer overflow in WebML
+ * Critical CVE-2026-5859: Integer overflow in WebML
+ * High CVE-2026-5860: Use after free in WebRTC
+ * High CVE-2026-5861: Use after free in V8
+ * High CVE-2026-5862: Inappropriate implementation in V8
+ * High CVE-2026-5863: Inappropriate implementation in V8
+ * High CVE-2026-5864: Heap buffer overflow in WebAudio
+ * High CVE-2026-5865: Type Confusion in V8
+ * High CVE-2026-5866: Use after free in Media
+ * High CVE-2026-5867: Heap buffer overflow in WebML
+ * High CVE-2026-5868: Heap buffer overflow in ANGLE
+ * High CVE-2026-5869: Heap buffer overflow in WebML
+ * High CVE-2026-5870: Integer overflow in Skia
+ * High CVE-2026-5871: Type Confusion in V8
+ * High CVE-2026-5872: Use after free in Blink
+ * High CVE-2026-5873: Out of bounds read and write in V8
+ * Medium CVE-2026-5874: Use after free in PrivateAI
+ * Medium CVE-2026-5875: Policy bypass in Blink
+ * Medium CVE-2026-5876: Side-channel information leakage in Navigation
+ * Medium CVE-2026-5877: Use after free in Navigation
+ * Medium CVE-2026-5878: Incorrect security UI in Blink
+ * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
+ * Medium CVE-2026-5880: Incorrect security UI in browser UI
+ * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
+ * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
+ * Medium CVE-2026-5883: Use after free in Media
+ * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
+ * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
+ * Medium CVE-2026-5886: Out of bounds read in WebAudio
+ * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
+ * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
+ * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
+ * Medium CVE-2026-5890: Race in WebCodecs
+ * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
+ * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
+ * Medium CVE-2026-5893: Race in V8
+ * Low CVE-2026-5894: Inappropriate implementation in PDF
+ * Low CVE-2026-5895: Incorrect security UI in Omnibox
+ * Low CVE-2026-5896: Policy bypass in Audio
+ * Low CVE-2026-5897: Incorrect security UI in Downloads
+ * Low CVE-2026-5898: Incorrect security UI in Omnibox
+ * Low CVE-2026-5899: Incorrect security UI in History Navigation
+ * Low CVE-2026-5900: Policy bypass in Downloads
+ * Low CVE-2026-5901: Policy bypass in DevTools
+ * Low CVE-2026-5902: Race in Media
+ * Low CVE-2026-5903: Policy bypass in IFrameSandbox
+ * Low CVE-2026-5904: Use after free in V8
+ * Low CVE-2026-5905: Incorrect security UI in Permissions
+ * Low CVE-2026-5906: Incorrect security UI in Omnibox
+ * Low CVE-2026-5907: Insufficient data validation in Media
+ * Low CVE-2026-5908: Integer overflow in Media
+ * Low CVE-2026-5909: Integer overflow in Media
+ * Low CVE-2026-5910: Integer overflow in Media
+ * Low CVE-2026-5911: Policy bypass in ServiceWorkers
+ * Low CVE-2026-5912: Integer overflow in WebRTC
+ * Low CVE-2026-5913: Out of bounds read in Blink
+ * Low CVE-2026-5914: Type Confusion in CSS
+ * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
+ * Low CVE-2026-5918: Inappropriate implementation in Navigation
+ * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
* Wed Apr 01 2026 Than Ngo <than@redhat.com> - 146.0.7680.177-1
- Update to 146.0.7680.177
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [rpms/chromium] epel9-next: Add CVEs in changelog
@ 2026-08-07 16:08 Than Ngo
0 siblings, 0 replies; 3+ messages in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : 1abce2e2df335937a50bd3df7ba9e4fb0ec27b5a
Author : Than Ngo <than@redhat.com>
Date : 2025-11-04T13:37:09+01:00
Stats : +20/-0 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/1abce2e2df335937a50bd3df7ba9e4fb0ec27b5a?branch=epel9-next
Log:
Add CVEs in changelog
* High CVE-2025-12428: Type Confusion in V8
* High CVE-2025-12429: Inappropriate implementation in V8
* High CVE-2025-12430: Object lifecycle issue in Media
* High CVE-2025-12431: Inappropriate implementation in Extensions
* High CVE-2025-12432: Race in V8
* High CVE-2025-12433: Inappropriate implementation in V8
* High CVE-2025-12036: Inappropriate implementation in V8
* Medium CVE-2025-12434: Race in Storage
* Medium CVE-2025-12435: Incorrect security UI in Omnibox
* Medium CVE-2025-12436: Policy bypass in Extensions
* Medium CVE-2025-12437: Use after free in PageInfo
* Medium CVE-2025-12438: Use after free in Ozone
* Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
* Low CVE-2025-12440: Inappropriate implementation in Autofill
* Medium CVE-2025-12441: Out of bounds read in V8
* Medium CVE-2025-12443: Out of bounds read in WebXR
* Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
* Low CVE-2025-12445: Policy bypass in Extensions
* Low CVE-2025-12446: Incorrect security UI in SplitView
* Low CVE-2025-12447: Incorrect security UI in Omnibox
---
diff --git a/chromium.spec b/chromium.spec
index f19f0e1..f6915ee 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -1754,6 +1754,26 @@ fi
%changelog
* Thu Oct 30 2025 Than Ngo <than@redhat.com> - 142.0.7444.59-1
- Update to 142.0.7444.59
+ * High CVE-2025-12428: Type Confusion in V8
+ * High CVE-2025-12429: Inappropriate implementation in V8
+ * High CVE-2025-12430: Object lifecycle issue in Media
+ * High CVE-2025-12431: Inappropriate implementation in Extensions
+ * High CVE-2025-12432: Race in V8
+ * High CVE-2025-12433: Inappropriate implementation in V8
+ * High CVE-2025-12036: Inappropriate implementation in V8
+ * Medium CVE-2025-12434: Race in Storage
+ * Medium CVE-2025-12435: Incorrect security UI in Omnibox
+ * Medium CVE-2025-12436: Policy bypass in Extensions
+ * Medium CVE-2025-12437: Use after free in PageInfo
+ * Medium CVE-2025-12438: Use after free in Ozone
+ * Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
+ * Low CVE-2025-12440: Inappropriate implementation in Autofill
+ * Medium CVE-2025-12441: Out of bounds read in V8
+ * Medium CVE-2025-12443: Out of bounds read in WebXR
+ * Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
+ * Low CVE-2025-12445: Policy bypass in Extensions
+ * Low CVE-2025-12446: Incorrect security UI in SplitView
+ * Low CVE-2025-12447: Incorrect security UI in Omnibox
* Refreshed ppc64le patches
* Refreshed system-brotli patch
* Refreshed clang++-unknown-argument patch
^ permalink raw reply related [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-08-07 16:09 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:09 [rpms/chromium] epel9-next: Add CVEs in changelog Than Ngo
-- strict thread matches above, loose matches on Subject: below --
2026-08-07 16:08 Than Ngo
2026-08-07 16:08 Than Ngo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox