add chromium-140-old-flac.patch

chromium-140-old-flac.patch

@@ -0,0 +1,11 @@
+--- chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:29:53	1.1
++++ chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:30:09
+@@ -166,7 +166,7 @@
+   // `FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA` is the last enumeration
+   // value of `FLAC__StreamDecoderErrorStatus`. The legal status value should be
+   // less than or equal to it.
+-  CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
++  // CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
+   LOG(ERROR) << "Got an error callback: "
+              // SAFETY: The above CHECK ensures that `status` does not exceed
+              // the length of `FLAC__StreamDecoderErrorStatusString`

chromium.changes

@@ -1,5 +1,5 @@
 -------------------------------------------------------------------
-Thu Aug  7 22:48:54 CEST 2025 - ro@suse.de
+Wed Aug 13 12:34:42 CEST 2025 - ro@suse.de
 
 - Chromium 140.0.7339.5
   (beta released 2025-08-06)
@@ -12,10 +12,13 @@ Thu Aug  7 22:48:54 CEST 2025 - ro@suse.de
   ppc-fedora-add-ppc64-architecture-to-extensions.diff
   chromium-102-regex_pattern-array.patch
   gtk-414.patch
+  ppc-fedora-fix-study-crash.patch
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
 - added patches:
   chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
   (revert of upstream patch
    8393b61ba876c8e1614275c97767f9b06b889f48)
+  chromium-140-old-flac.patch (applied for flac < 1.5.0)
 - change rust_version to 1.86
 - keeplibs:
   removed buildtools/third_party/eu-strip (gone upstream)
@@ -23,6 +26,16 @@ Thu Aug  7 22:48:54 CEST 2025 - ro@suse.de
 - bump gn BuildReq to 0.20250619
 - do not use system_harfbuzz for 16+ for now, unbundle is broken
 
+-------------------------------------------------------------------
+Wed Aug 13 04:21:07 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.127 (boo#1247981):
+  * CVE-2025-8879: Heap buffer overflow in libaom
+  * CVE-2025-8880: Race in V8
+  * CVE-2025-8901: Out of bounds write in ANGLE
+  * CVE-2025-8881: Inappropriate implementation in File Picker
+  * CVE-2025-8882: Use after free in Aura
+  * Various fixes from internal audits, fuzzing and other initiatives
 
 -------------------------------------------------------------------
 Thu Aug  7 15:48:37 CEST 2025 - ro@suse.de

chromium.spec

@@ -100,6 +100,11 @@
 %else
 %bcond_with gtk4_4_19
 %endif
+%if %{pkg_vcmp flac-devel >= 1.5.0}
+%bcond_without flac_1_5
+%else
+%bcond_with flac_1_5
+%endif
 # Package names
 %if %{with is_beta}
 %define chromedriver_name %{name}-chromedriver
@@ -232,6 +237,8 @@ Patch1010:      chromium-124-system-libxml.patch
 Patch1030:      chromium-134-revert-rust-adler2.patch
 # gtk4 is too old
 Patch1040:      gtk-414.patch
+# flac is too old
+Patch1050:      chromium-140-old-flac.patch
 # end conditionally applied patches
 BuildRequires:  SDL-devel
 BuildRequires:  bison
@@ -506,6 +513,10 @@ WebDriver is an open source tool for automated testing of webapps across many br
 %patch -p1 -R -P 1040
 %endif
 
+%if %{without flac_1_5}
+%patch -p1 -P 1050
+%endif
+
 %build
 # esbuild
 rm third_party/devtools-frontend/src/third_party/esbuild/esbuild

ppc-fedora-fix-study-crash.patch

@@ -10,9 +10,9 @@
    }
  
    // Enum to pass as optional bool.
---- a/components/variations/service/variations_field_trial_creator_base.cc
+--- chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:50:52	1.1
-+++ b/components/variations/service/variations_field_trial_creator_base.cc
++++ chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:51:32
-@@ -109,6 +109,9 @@
+@@ -105,6 +105,9 @@
    if (process_arch == "x86") {
      return Study::X86_32;
    }