[ol10_u1_developer_EPEL] chromium-headless-148.0.7778.167-1.el10_1.aarch64

Name:	chromium-headless
Version:	148.0.7778.167
Release:	1.el10_1
Architecture:	aarch64
Group:	Unspecified
Size:	195651356
License:	BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
RPM:	chromium-headless-148.0.7778.167-1.el10_1.aarch64.rpm
Source RPM:	chromium-148.0.7778.167-1.el10_1.src.rpm
Build Date:	Tue May 19 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.chromium.org/Home
Summary:	A minimal headless shell built from Chromium
Description:	A minimal headless client built from Chromium. headless_shell is built without support for alsa, cups, dbus, gconf, gio, kerberos, pulseaudio, or udev.

Changelog (Show File list) (Show related packages)

Fri May 15 2026 Than Ngo <than@redhat.com> - 148.0.7778.167-1

- Update to 148.0.7778.167
   * CVE-2026-8509: Heap buffer overflow in WebML
   * CVE-2026-8510: Integer overflow in Skia
   * CVE-2026-8511: Use after free in UI
   * CVE-2026-8512: Use after free in FileSystem
   * CVE-2026-8513: Use after free in Input
   * CVE-2026-8514: Use after free in Aura
   * CVE-2026-8515: Use after free in HID
   * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
   * CVE-2026-8517: Object lifecycle issue in WebShare
   * CVE-2026-8518: Use after free in Blink
   * CVE-2026-8519: Integer overflow in ANGLE
   * CVE-2026-8520: Race in Payments
   * CVE-2026-8521: Use after free in Tab Groups
   * CVE-2026-8522: Use after free in Downloads
   * CVE-2026-8523: Use after free in Mojo
   * CVE-2026-8558: Out of bounds write in Fonts
   * CVE-2026-8524: Out of bounds write in WebAudio
   * CVE-2026-8525: Heap buffer overflow in ANGLE
   * CVE-2026-8526: Out of bounds write in WebRTC
   * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
   * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8529: Heap buffer overflow in Codecs
   * CVE-2026-8530: Use after free in Network
   * CVE-2026-8531: Heap buffer overflow in WebML
   * CVE-2026-8532: Integer overflow in XML
   * CVE-2026-8533: Use after free in Accessibility
   * CVE-2026-8534: Integer overflow in GPU
   * CVE-2026-8535: Out of bounds read in Media
   * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
   * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
   * CVE-2026-8538: Insufficient validation of untrusted input in GPU
   * CVE-2026-8539: Script injection in SanitizerAPI
   * CVE-2026-8540: Type Confusion in V8
   * CVE-2026-8541: Out of bounds read in UI
   * CVE-2026-8542: Use after free in Core
   * CVE-2026-8543: Out of bounds read in FileSystem
   * CVE-2026-8544: Use after free in Media
   * CVE-2026-8545: Object corruption in Compositing
   * CVE-2026-8546: Out of bounds read in GPU
   * CVE-2026-8547: Insufficient policy enforcement in Passwords
   * CVE-2026-8548: Out of bounds write in Media
   * CVE-2026-8549: Use after free in Media
   * CVE-2026-8550: Use after free in Google Lens
   * CVE-2026-8551: Use after free in Downloads
   * CVE-2026-8552: Heap buffer overflow in GPU
   * CVE-2026-8553: Use after free in GPU
   * CVE-2026-8554: Type Confusion in ANGLE
   * CVE-2026-8555: Use after free in GTK
   * CVE-2026-8556: Inappropriate implementation in ANGLE
   * CVE-2026-8557: Use after free in Accessibility
   * CVE-2026-8559: Integer overflow in Internationalization
   * CVE-2026-8560: Heap buffer overflow in SwiftShader
   * CVE-2026-8561: Incorrect security UI in Fullscreen
   * CVE-2026-8562: Side-channel information leakage in Navigation
   * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
   * CVE-2026-8564: Incorrect security UI in Downloads
   * CVE-2026-8565: Inappropriate implementation in Downloads
   * CVE-2026-8566: Insufficient policy enforcement in Payments
   * CVE-2026-8567: Integer overflow in ANGLE
   * CVE-2026-8568: Insufficient policy enforcement in AI
   * CVE-2026-8569: Out of bounds write in Codecs
   * CVE-2026-8570: Type Confusion in V8
   * CVE-2026-8571: Insufficient policy enforcement in GPU
   * CVE-2026-8572: Insufficient policy enforcement in Network
   * CVE-2026-8573: Integer overflow in Codecs
   * CVE-2026-8574: Use after free in Core
   * CVE-2026-8575: Use after free in UI
   * CVE-2026-8576: Inappropriate implementation in CORS
   * CVE-2026-8577: Integer overflow in Fonts
   * CVE-2026-8578: Out of bounds read in GPU
   * CVE-2026-8579: Insufficient validation of untrusted input in Skia
   * CVE-2026-8580: Use after free in Mojo
   * CVE-2026-8581: Use after free in GPU
   * CVE-2026-8582: Object lifecycle issue in Dawn
   * CVE-2026-8583: Insufficient policy enforcement in WebXR
   * CVE-2026-8584: Inappropriate implementation in Views
   * CVE-2026-8585: Inappropriate implementation in Media
   * CVE-2026-8586: Inappropriate implementation in Chromoting
   * CVE-2026-8587: Use after free in Extensions

Wed May 06 2026 Than Ngo <than@redhat.com> - 148.0.7778.96-1

- Update to 148.0.7778.96
   * CVE-2026-7896: Integer overflow in Blink
   * CVE-2026-7897: Use after free in Mobile
   * CVE-2026-7898: Use after free in Chromoting
   * CVE-2026-7899: Out of bounds read and write in V8
   * CVE-2026-7900: Heap buffer overflow in ANGLE
   * CVE-2026-7901: Use after free in ANGLE
   * CVE-2026-7902: Out of bounds memory access in V8
   * CVE-2026-7903: Integer overflow in ANGLE
   * CVE-2026-7904: Out of bounds read in Fonts
   * CVE-2026-7905: Insufficient validation of untrusted input in Media
   * CVE-2026-7906: Use after free in SVG
   * CVE-2026-7907: Use after free in DOM
   * CVE-2026-7908: Use after free in Fullscreen
   * CVE-2026-7909: Inappropriate implementation in ServiceWorker
   * CVE-2026-7910: Use after free in Views
   * CVE-2026-7911: Use after free in Aura
   * CVE-2026-7912: Integer overflow in GPU
   * CVE-2026-7913: Insufficient policy enforcement in DevTools
   * CVE-2026-7914: Type Confusion in Accessibility
   * CVE-2026-7915: Insufficient data validation in DevTools
   * CVE-2026-7916: Insufficient data validation in InterestGroups
   * CVE-2026-7917: Use after free in Fullscreen
   * CVE-2026-7918: Use after free in GPU
   * CVE-2026-7919: Use after free in Aura
   * CVE-2026-7920: Use after free in Skia
   * CVE-2026-7921: Use after free in Passwords
   * CVE-2026-7922: Use after free in ServiceWorker
   * CVE-2026-7923: Out of bounds write in Skia
   * CVE-2026-7924: Uninitialized Use in Dawn
   * CVE-2026-7925: Use after free in Chromoting
   * CVE-2026-7926: Use after free in PresentationAPI
   * CVE-2026-7927: Type Confusion in Runtime
   * CVE-2026-7928: Use after free in WebRTC
   * CVE-2026-7929: Use after free in MediaRecording
   * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
   * CVE-2026-7931: Insufficient validation of untrusted input in iOS
   * CVE-2026-7932: Insufficient policy enforcement in Downloads
   * CVE-2026-7933: Out of bounds read in WebCodecs
   * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
   * CVE-2026-7935: Inappropriate implementation in Speech
   * CVE-2026-7936: Object lifecycle issue in V8
   * CVE-2026-7937: Insufficient policy enforcement in DevTools
   * CVE-2026-7938: Use after free in CSS
   * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
   * CVE-2026-7940: Use after free in V8
   * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
   * CVE-2026-7942: Integer overflow in ANGLE
   * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
   * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
   * CVE-2026-7945: Insufficient validation of untrusted input in COOP
   * CVE-2026-7946: Insufficient policy enforcement in WebUI
   * CVE-2026-7947: Insufficient validation of untrusted input in Network
   * CVE-2026-7948: Race in Chromoting
   * CVE-2026-7949: Out of bounds read in Skia
   * CVE-2026-7950: Out of bounds read and write in GFX
   * CVE-2026-7951: Out of bounds write in WebRTC
   * CVE-2026-7952: Insufficient policy enforcement in Extensions
   * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
   * CVE-2026-7954: Race in Shared Storage
   * CVE-2026-7955: Uninitialized Use in GPU
   * CVE-2026-7956: Use after free in Navigation
   * CVE-2026-7957: Out of bounds write in Media
   * CVE-2026-7958: Inappropriate implementation in ServiceWorker
   * CVE-2026-7959: Inappropriate implementation in Navigation
   * CVE-2026-7960: Race in Speech
   * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
   * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
   * CVE-2026-7963: Inappropriate implementation in ServiceWorker
   * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
   * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
   * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
   * CVE-2026-7968: Insufficient validation of untrusted input in CORS
   * CVE-2026-7969: Integer overflow in Network
   * CVE-2026-7970: Use after free in TopChrome
   * CVE-2026-7971: Inappropriate implementation in ORB
   * CVE-2026-7972: Uninitialized Use in GPU
   * CVE-2026-7973: Integer overflow in Dawn
   * CVE-2026-7974: Use after free in Blink
   * CVE-2026-7975: Use after free in DevTools
   * CVE-2026-7976: Use after free in Views
   * CVE-2026-7977: Inappropriate implementation in Canvas
   * CVE-2026-7978: Inappropriate implementation in Companion
   * CVE-2026-7979: Inappropriate implementation in Media
   * CVE-2026-7980: Use after free in WebAudio
   * CVE-2026-7981: Out of bounds read in Codecs
   * CVE-2026-7982: Uninitialized Use in WebCodecs
   * CVE-2026-7983: Out of bounds read in Dawn
   * CVE-2026-7984: Use after free in ReadingMode
   * CVE-2026-7985: Use after free in GPU
   * CVE-2026-7986: Insufficient policy enforcement in Autofill
   * CVE-2026-7987: Use after free in WebRTC
   * CVE-2026-7988: Type Confusion in WebRTC
   * CVE-2026-7989: Insufficient data validation in DataTransfer
   * CVE-2026-7990: Insufficient validation of untrusted input in Updater
   * CVE-2026-7991: Use after free in UI
   * CVE-2026-7992: Insufficient validation of untrusted input in UI
   * CVE-2026-7993: Insufficient validation of untrusted input in Payments
   * CVE-2026-7994: Inappropriate implementation in Chromoting
   * CVE-2026-7995: Out of bounds read in AdFilter
   * CVE-2026-7996: Insufficient validation of untrusted input in SSL
   * CVE-2026-7997: Insufficient validation of untrusted input in Updater
   * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
   * CVE-2026-7999: Inappropriate implementation in V8
   * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
   * CVE-2026-8001: Use after free in Printing
   * CVE-2026-8002: Use after free in Audio
   * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
   * CVE-2026-8004: Insufficient policy enforcement in DevTools
   * CVE-2026-8005: Insufficient validation of untrusted input in Cast
   * CVE-2026-8006: Insufficient policy enforcement in DevTools
   * CVE-2026-8007: Insufficient validation of untrusted input in Cast
   * CVE-2026-8008: Inappropriate implementation in DevTools
   * CVE-2026-8009: Inappropriate implementation in Cast
   * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
   * CVE-2026-8011: Insufficient policy enforcement in Search
   * CVE-2026-8012: Inappropriate implementation in MHTML
   * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
   * CVE-2026-8014: Inappropriate implementation in Preload
   * CVE-2026-8015: Inappropriate implementation in Media
   * CVE-2026-8016: Use after free in WebRTC
   * CVE-2026-8017: Side-channel information leakage in Media
   * CVE-2026-8018: Insufficient policy enforcement in DevTools
   * CVE-2026-8019: Insufficient policy enforcement in WebApp
   * CVE-2026-8020: Uninitialized Use in GPU
   * CVE-2026-8021: Script injection in UI
   * CVE-2026-8022: Inappropriate implementation in MHTML
- Remove old remoting-no-tests patch
- Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
- Fix build error causing by sanitizer defines in GN
- Refresh rust-enable-unstable_feature patch
- Fix build error with system rust compiler
- Fix build error causing by new clang++ options which are not supported yet
- Fix build error causing by harfbuzz library rename

Wed Apr 29 2026 Than Ngo <than@redhat.com> - 147.0.7727.137-1

- Update to 147.0.7727.137
   * Critical CVE-2026-7363: Use after free in Canvas
   * Critical CVE-2026-7361: Use after free in iOS
   * Critical CVE-2026-7344: Use after free in Accessibility
   * Critical CVE-2026-7343: Use after free in Views
   * High CVE-2026-7333: Use after free in GPU
   * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
   * High CVE-2026-7359: Use after free in ANGLE
   * High CVE-2026-7358: Use after free in Animation
   * High CVE-2026-7334: Use after free in Views
   * High CVE-2026-7357: Use after free in GPU
   * High CVE-2026-7356: Use after free in Navigation
   * High CVE-2026-7354: Out of bounds read and write in Angle
   * High CVE-2026-7353: Heap buffer overflow in Skia
   * High CVE-2026-7352: Use after free in Media
   * High CVE-2026-7351: Race in MHTML
   * High CVE-2026-7350: Use after free in WebMIDI
   * High CVE-2026-7349: Use after free in Cast
   * High CVE-2026-7348: Use after free in Codecs
   * High CVE-2026-7335: Use after free in media
   * High CVE-2026-7336: Use after free in WebRTC
   * High CVE-2026-7337: Type Confusion in V8
   * High CVE-2026-7347: Use after free in Chromoting
   * High CVE-2026-7346: Inappropriate implementation in Tint
   * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
   * High CVE-2026-7338: Use after free in Cast
   * High CVE-2026-7342: Use after free in WebView
   * High CVE-2026-7341: Use after free in WebRTC
   * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
   * Medium CVE-2026-7340: Integer overflow in ANGLE
   * Medium CVE-2026-7355: Use after free in Media

Sun Apr 26 2026 Than Ngo <than@redhat.com> - 147.0.7727.116-2

- Fix FTBFS with rust 1.95
- Backport the upstream fix GL native pixmap import support reset in GpuInit

Thu Apr 23 2026 Than Ngo <than@redhat.com> - 147.0.7727.116-1

- Update to 147.0.7727.116
  * High CVE-2026-6919: Use after free in DevTools
  * High CVE-2026-6920: Out of bounds read in GPU
  * Medium CVE-2026-6921: Race in GPU
- Fix rhbz#2458171, unexpanded macros in manpage

Wed Apr 15 2026 Than Ngo <than@redhat.com> - 147.0.7727.101-1

- Update to 147.0.7727.101
  * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
  * Critical CVE-2026-6297: Use after free in Proxy
  * Critical CVE-2026-6298: Heap buffer overflow in Skia
  * Critical CVE-2026-6299: Use after free in Prerender
  * Critical CVE-2026-6358: Use after free in XR
  * High CVE-2026-6359: Use after free in Video
  * High CVE-2026-6300: Use after free in CSS
  * High CVE-2026-6301: Type Confusion in Turbofan
  * High CVE-2026-6302: Use after free in Video
  * High CVE-2026-6303: Use after free in Codecs
  * High CVE-2026-6304: Use after free in Graphite
  * High CVE-2026-6305: Heap buffer overflow in PDFium
  * High CVE-2026-6306: Heap buffer overflow in PDFium
  * High CVE-2026-6307: Type Confusion in Turbofan
  * High CVE-2026-6308: Out of bounds read in Media
  * High CVE-2026-6309: Use after free in Viz
  * High CVE-2026-6360: Use after free in FileSystem
  * High CVE-2026-6310: Use after free in Dawn
  * High CVE-2026-6311: Uninitialized Use in Accessibility
  * High CVE-2026-6312: Insufficient policy enforcement in Passwords
  * High CVE-2026-6313: Insufficient policy enforcement in CORS
  * High CVE-2026-6314: Out of bounds write in GPU
  * High CVE-2026-6315: Use after free in Permissions
  * High CVE-2026-6316: Use after free in Forms
  * High CVE-2026-6361: Heap buffer overflow in PDFium
  * High CVE-2026-6362: Use after free in Codecs
  * High CVE-2026-6317: Use after free in Cast
  * Medium CVE-2026-6363: Type Confusion in V8
  * Medium CVE-2026-6318: Use after free in Codecs
  * Medium CVE-2026-6319: Use after free in Payments
  * Medium CVE-2026-6364: Out of bounds read in Skia

Thu Apr 09 2026 Than Ngo <than@redhat.com> - 147.0.7727.55-1

- Update to 147.0.7727.55
  * Critical CVE-2026-5858: Heap buffer overflow in WebML
  * Critical CVE-2026-5859: Integer overflow in WebML
  * High CVE-2026-5860: Use after free in WebRTC
  * High CVE-2026-5861: Use after free in V8
  * High CVE-2026-5862: Inappropriate implementation in V8
  * High CVE-2026-5863: Inappropriate implementation in V8
  * High CVE-2026-5864: Heap buffer overflow in WebAudio
  * High CVE-2026-5865: Type Confusion in V8
  * High CVE-2026-5866: Use after free in Media
  * High CVE-2026-5867: Heap buffer overflow in WebML
  * High CVE-2026-5868: Heap buffer overflow in ANGLE
  * High CVE-2026-5869: Heap buffer overflow in WebML
  * High CVE-2026-5870: Integer overflow in Skia
  * High CVE-2026-5871: Type Confusion in V8
  * High CVE-2026-5872: Use after free in Blink
  * High CVE-2026-5873: Out of bounds read and write in V8
  * Medium CVE-2026-5874: Use after free in PrivateAI
  * Medium CVE-2026-5875: Policy bypass in Blink
  * Medium CVE-2026-5876: Side-channel information leakage in Navigation
  * Medium CVE-2026-5877: Use after free in Navigation
  * Medium CVE-2026-5878: Incorrect security UI in Blink
  * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * Medium CVE-2026-5880: Incorrect security UI in browser UI
  * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
  * Medium CVE-2026-5883: Use after free in Media
  * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
  * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * Medium CVE-2026-5886: Out of bounds read in WebAudio
  * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
  * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
  * Medium CVE-2026-5890: Race in WebCodecs
  * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
  * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
  * Medium CVE-2026-5893: Race in V8
  * Low CVE-2026-5894: Inappropriate implementation in PDF
  * Low CVE-2026-5895: Incorrect security UI in Omnibox
  * Low CVE-2026-5896: Policy bypass in Audio
  * Low CVE-2026-5897: Incorrect security UI in Downloads
  * Low CVE-2026-5898: Incorrect security UI in Omnibox
  * Low CVE-2026-5899: Incorrect security UI in History Navigation
  * Low CVE-2026-5900: Policy bypass in Downloads
  * Low CVE-2026-5901: Policy bypass in DevTools
  * Low CVE-2026-5902: Race in Media
  * Low CVE-2026-5903: Policy bypass in IFrameSandbox
  * Low CVE-2026-5904: Use after free in V8
  * Low CVE-2026-5905: Incorrect security UI in Permissions
  * Low CVE-2026-5906: Incorrect security UI in Omnibox
  * Low CVE-2026-5907: Insufficient data validation in Media
  * Low CVE-2026-5908: Integer overflow in Media
  * Low CVE-2026-5909: Integer overflow in Media
  * Low CVE-2026-5910: Integer overflow in Media
  * Low CVE-2026-5911: Policy bypass in ServiceWorkers
  * Low CVE-2026-5912: Integer overflow in WebRTC
  * Low CVE-2026-5913: Out of bounds read in Blink
  * Low CVE-2026-5914: Type Confusion in CSS
  * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * Low CVE-2026-5918: Inappropriate implementation in Navigation
  * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets

Wed Apr 01 2026 Than Ngo <than@redhat.com> - 146.0.7680.177-1

- Update to 146.0.7680.177
  * High CVE-2026-5273: Use after free in CSS
  * High CVE-2026-5272: Heap buffer overflow in GPU
  * High CVE-2026-5274: Integer overflow in Codecs
  * High CVE-2026-5275: Heap buffer overflow in ANGLE
  * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * High CVE-2026-5277: Integer overflow in ANGLE
  * High CVE-2026-5278: Use after free in Web MIDI
  * High CVE-2026-5279: Object corruption in V8
  * High CVE-2026-5280: Use after free in WebCodecs
  * High CVE-2026-5281: Use after free in Dawn
  * High CVE-2026-5282: Out of bounds read in WebCodecs
  * High CVE-2026-5283: Inappropriate implementation in ANGLE
  * High CVE-2026-5284: Use after free in Dawn
  * High CVE-2026-5285: Use after free in WebGL
  * High CVE-2026-5286: Use after free in Dawn
  * High CVE-2026-5287: Use after free in PDF
  * High CVE-2026-5288: Use after free in WebView
  * High CVE-2026-5289: Use after free in Navigation
  * High CVE-2026-5290: Use after free in Compositing
  * Medium CVE-2026-5291: Inappropriate implementation in WebGL
  * Medium CVE-2026-5292: Out of bounds read in WebCodecs

Tue Mar 24 2026 Than Ngo <than@redhat.com> - 146.0.7680.164-1

- Update to 146.0.7680.164
  * High CVE-2026-4673: Heap buffer overflow in WebAudio
  * High CVE-2026-4674: Out of bounds read in CSS
  * High CVE-2026-4675: Heap buffer overflow in WebGL
  * High CVE-2026-4676: Use after free in Dawn
  * High CVE-2026-4677: Out of bounds read in WebAudio
  * High CVE-2026-4678: Use after free in WebGPU
  * High CVE-2026-4679: Integer overflow in Fonts
  * High CVE-2026-4680: Use after free in FedCM

Fri Mar 20 2026 Than Ngo <than@redhat.com> - 146.0.7680.153-1

- Update to 146.0.7680.153
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE