chromium/chromium-dev
SHA256
11
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
33bdf6913860c30d1bc0028a5f28b9fa522a2c664e2589c25d58b8ec2061d5d3
chromium-dev/chromium.changes

5371 lines
215 KiB
Plaintext
Raw Normal View History

Accepting request 787802 from home:alarrosa:branches:network:chromium - Add patch to allow building with pipewire 0.3: * build-with-pipewire-0.3.patch - Use pipewire in Leap 15.2 OBS-URL: https://build.opensuse.org/request/show/787802 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1379
2020-03-24 13:22:18 +00:00
-------------------------------------------------------------------
Mon Mar 23 16:49:16 UTC 2020 - Antonio Larrosa <alarrosa@suse.com>
- Add patch to allow building with pipewire 0.3:
* build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2
- Update to 80.0.3987.149: * High CVE-2020-6422: Use after free in WebGL. * High CVE-2020-6424: Use after free in media. * High CVE-2020-6425: Insufficient policy enforcement in extensions. * High CVE-2020-6426: Inappropriate implementation in V8. * High CVE-2020-6427: Use after free in audio. * High CVE-2020-6428: Use after free in audio. * High CVE-2020-6429: Use after free in audio. * High CVE-2019-20503: Out of bounds read in usersctplib. * High CVE-2020-6449: Use after free in audio. * Various fixes from internal audits, fuzzing and other initiatives OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1378
2020-03-19 11:27:49 +00:00
-------------------------------------------------------------------
Thu Mar 19 11:13:24 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 80.0.3987.149:
* High CVE-2020-6422: Use after free in WebGL.
* High CVE-2020-6424: Use after free in media.
* High CVE-2020-6425: Insufficient policy enforcement in extensions.
* High CVE-2020-6426: Inappropriate implementation in V8.
* High CVE-2020-6427: Use after free in audio.
* High CVE-2020-6428: Use after free in audio.
* High CVE-2020-6429: Use after free in audio.
* High CVE-2019-20503: Out of bounds read in usersctplib.
* High CVE-2020-6449: Use after free in audio.
* Various fixes from internal audits, fuzzing and other initiatives
- Do not pull in python deps except interpreter, the bundles are patched anwyays OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1375
2020-03-14 09:18:59 +00:00
-------------------------------------------------------------------
Sat Mar 14 09:18:06 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Do not pull in python deps except interpreter, the bundles
are patched anwyays
- Update to 80.0.3987.132 bsc#1165826: * CVE-2020-6420: Insufficient policy enforcement in media. * Various fixes from internal audits, fuzzing and other initiatives [2]. OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1373
2020-03-05 18:33:34 +00:00
-------------------------------------------------------------------
Thu Mar 5 18:15:45 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 80.0.3987.132 bsc#1165826:
* CVE-2020-6420: Insufficient policy enforcement in media.
* Various fixes from internal audits, fuzzing and other initiatives [2].
- Add patch trying to fix pulse audio issues with webrtc: * webrtc-pulse.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1372
2020-03-03 16:48:39 +00:00
-------------------------------------------------------------------
Tue Mar 3 16:45:10 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Add patch trying to fix pulse audio issues with webrtc:
* webrtc-pulse.patch
- Update to 80.0.3987.122 bsc#1164828: * CVE-2020-6418: Type confusion in V8 * CVE-2020-6407: Out of bounds memory access in streams. * Integer overflow in ICU OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1370
2020-02-25 13:43:08 +00:00
-------------------------------------------------------------------
Tue Feb 25 12:25:51 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 80.0.3987.122 bsc#1164828:
* CVE-2020-6418: Type confusion in V8
* CVE-2020-6407: Out of bounds memory access in streams.
* Integer overflow in ICU
- Add chromedriver binary to bindir OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1368
2020-02-17 12:19:26 +00:00
-------------------------------------------------------------------
Mon Feb 17 12:18:23 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Add chromedriver binary to bindir
- Drop sandbox binary as it should not be needed really bsc#1163588 - Remove unused patch: * chromium-sandbox-pie.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1366
2020-02-13 14:52:49 +00:00
-------------------------------------------------------------------
Thu Feb 13 14:51:34 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
* chromium-sandbox-pie.patch
- Update to 80.0.3987.100 bsc#1163484: * feature fixes only OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1365
2020-02-12 13:31:36 +00:00
-------------------------------------------------------------------
Wed Feb 12 13:16:28 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 80.0.3987.100 bsc#1163484:
* feature fixes only
Accepting request 765546 from home:AndreasStieger:branches:network:chromium - Update to 79.0.3945.130 boo#1161252: * CVE-2020-6378: Use-after-free in speech recognizer * CVE-2020-6379: Use-after-free in speech recognizer * CVE-2020-6380: Extension message verification error * Various fixes from internal audits, fuzzing and other initiatives OBS-URL: https://build.opensuse.org/request/show/765546 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1361
2020-01-19 14:40:57 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Feb 5 13:04:03 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 80.0.3987.87 bsc#1162833:
* CVE-2020-6381: Integer overflow in JavaScript
* CVE-2020-6382: Type Confusion in JavaScript
* CVE-2019-18197: Multiple vulnerabilities in XML
* CVE-2019-19926: Inappropriate implementation in SQLite
* CVE-2020-6385: Insufficient policy enforcement in storage
* CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
* CVE-2020-6387: Out of bounds write in WebRTC
* CVE-2020-6388: Out of bounds memory access in WebAudio
* CVE-2020-6389: Out of bounds write in WebRTC
* CVE-2020-6390: Out of bounds memory access in streams
* CVE-2020-6391: Insufficient validation of untrusted input in Blink
* CVE-2020-6392: Insufficient policy enforcement in extensions
* CVE-2020-6393: Insufficient policy enforcement in Blink
* CVE-2020-6394: Insufficient policy enforcement in Blink
* CVE-2020-6395: Out of bounds read in JavaScript
* CVE-2020-6396: Inappropriate implementation in Skia
* CVE-2020-6397: Incorrect security UI in sharing
* CVE-2020-6398: Uninitialized use in PDFium
* CVE-2020-6399: Insufficient policy enforcement in AppCache
* CVE-2020-6400: Inappropriate implementation in CORS
* CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
* CVE-2020-6402: Insufficient policy enforcement in downloads
* CVE-2020-6403: Incorrect security UI in Omnibox
* CVE-2020-6404: Inappropriate implementation in Blink
* CVE-2020-6405: Out of bounds read in SQLite
* CVE-2020-6406: Use after free in audio
* CVE-2019-19923: Out of bounds memory access in SQLite
* CVE-2020-6408: Insufficient policy enforcement in CORS
* CVE-2020-6409: Inappropriate implementation in Omnibox
* CVE-2020-6410: Insufficient policy enforcement in navigation
* CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
* CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
* CVE-2020-6413: Inappropriate implementation in Blink
* CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
* CVE-2020-6415: Inappropriate implementation in JavaScript
* CVE-2020-6416: Insufficient data validation in streams
* CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes >16GB ram
- Added patches:
* chromium-80-gcc-abstract.patch
* chromium-80-gcc-blink.patch
* chromium-80-gcc-incomplete-type.patch
* chromium-80-gcc-permissive.patch
* chromium-80-gcc-quiche.patch
* chromium-80-include.patch
* chromium-80-unbundle-libxml.patch
* chromium-80.0.3987.87.tar.xz
* chromium-fix-char_traits.patch
* gpu-timeout.patch
- Removed patches:
* chromium-79-gcc-ambiguous-nodestructor.patch
* chromium-79-gcc-name-clash.patch
* chromium-79-gcc-permissive.patch
* chromium-79-icu-65.patch
* chromium-79-include.patch
* chromium-79-system-hb.patch
- Rebased patches:
* chromium-old-glibc-noexcept.patch
* chromium-vaapi-fix.patch
* chromium-vaapi.patch
-------------------------------------------------------------------
Sat Jan 18 20:04:05 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
- Update to 79.0.3945.130 boo#1161252:
* CVE-2020-6378: Use-after-free in speech recognizer
* CVE-2020-6379: Use-after-free in speech recognizer
* CVE-2020-6380: Extension message verification error
* Various fixes from internal audits, fuzzing and other initiatives
-------------------------------------------------------------------
Wed Jan 8 07:48:01 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 79.0.3945.117 bsc#1160337:
* CVE-2020-6377: Use after free in audio
* Various fixes from internal audits, fuzzing and other initiatives
-------------------------------------------------------------------
Mon Dec 30 17:31:38 UTC 2019 - Stefan Brüns <stefan.bruens@rwth-aachen.de>
- Drop obsolete liboil BuildRequires.
-------------------------------------------------------------------
Thu Dec 19 21:58:01 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
- update to 79.0.3945.88:
* CVE-2019-13767: Use after free in media picker (boo#1159498)
-------------------------------------------------------------------
Wed Dec 11 09:34:00 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 79.0.3945.79:
* CVE-2019-13725: Use after free in Bluetooth
* CVE-2019-13726: Heap buffer overflow in password manager
* CVE-2019-13727: Insufficient policy enforcement in WebSockets
* CVE-2019-13728: Out of bounds write in V8
* CVE-2019-13729: Use after free in WebSockets
* CVE-2019-13730: Type Confusion in V8
* CVE-2019-13732: Use after free in WebAudio
* CVE-2019-13734: Out of bounds write in SQLite
* CVE-2019-13735: Out of bounds write in V8
* CVE-2019-13764: Type Confusion in V8
* CVE-2019-13736: Integer overflow in PDFium
* CVE-2019-13737: Insufficient policy enforcement in autocomplete
* CVE-2019-13738: Insufficient policy enforcement in navigation
* CVE-2019-13739: Incorrect security UI in Omnibox
* CVE-2019-13740: Incorrect security UI in sharing
* CVE-2019-13741: Insufficient validation of untrusted input in Blink
* CVE-2019-13742: Incorrect security UI in Omnibox
* CVE-2019-13743: Incorrect security UI in external protocol handling
* CVE-2019-13744: Insufficient policy enforcement in cookies
* CVE-2019-13745: Insufficient policy enforcement in audio
* CVE-2019-13746: Insufficient policy enforcement in Omnibox
* CVE-2019-13747: Uninitialized Use in rendering
* CVE-2019-13748: Insufficient policy enforcement in developer tools
* CVE-2019-13749: Incorrect security UI in Omnibox
* CVE-2019-13750: Insufficient data validation in SQLite
* CVE-2019-13751: Uninitialized Use in SQLite
* CVE-2019-13752: Out of bounds read in SQLite
* CVE-2019-13753: Out of bounds read in SQLite
* CVE-2019-13754: Insufficient policy enforcement in extensions
* CVE-2019-13755: Insufficient policy enforcement in extensions
* CVE-2019-13756: Incorrect security UI in printing
* CVE-2019-13757: Incorrect security UI in Omnibox
* CVE-2019-13758: Insufficient policy enforcement in navigation
* CVE-2019-13759: Incorrect security UI in interstitials
* CVE-2019-13761: Incorrect security UI in Omnibox
* CVE-2019-13762: Insufficient policy enforcement in downloads
* CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
* chromium-77-clang.patch
* chromium-78-gcc-enum-range.patch
* chromium-78-gcc-noexcept.patch
* chromium-78-gcc-std-vector.patch
* chromium-78-icon.patch
* chromium-78-include.patch
* chromium-78-noexcept.patch
* chromium-78-pm-crash.patch
* chromium-78-protobuf-export.patch
- Add new patches:
* chromium-79-gcc-alignas.patch
* chromium-79-gcc-ambiguous-nodestructor.patch
* chromium-79-gcc-name-clash.patch
* chromium-79-gcc-permissive.patch
* chromium-79-include.patch
* chromium-79-system-hb.patch
- Rebase patches:
* chromium-dma-buf.patch
* chromium-old-glibc-noexcept.patch
* chromium-vaapi-fix.patch
* fix_building_widevinecdm_with_chromium.patch
* old-libva.patch
Accepting request 746592 from home:AndreasStieger:branches:network:chromium Chromium 78.0.3904.97 boo#1156172: * Various security fixes from internal audits, fuzzing and other initiatives OBS-URL: https://build.opensuse.org/request/show/746592 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1343
2019-11-08 13:10:55 +00:00
- Keep just one conditional for vaapi enablement OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1337
2019-11-06 13:16:01 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 20 10:51:40 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Keep just one conditional for vaapi enablement OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1337
2019-11-06 13:16:01 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 78.0.3904.108 bsc#1157269:
* CVE-2019-13723: Use-after-free in Bluetooth
* CVE-2019-13724: Out-of-bounds access in Bluetooth
* Various fixes from internal audits, fuzzing and other initiatives
- Keep just one conditional for vaapi enablement OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1337
2019-11-06 13:16:01 +00:00
- Add more magic for zlib handling for SLE12 build OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1336
2019-11-04 11:25:45 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Nov 18 07:53:32 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add more magic for zlib handling for SLE12 build OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1336
2019-11-04 11:25:45 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Fix build on aarch64 with:
* chromium-79-icu-65.patch
- Add more magic for zlib handling for SLE12 build OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1336
2019-11-04 11:25:45 +00:00
- Add patch trying to build on SLE12: * chromium-old-glibc-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1335
2019-11-04 10:31:34 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Nov 8 12:46:23 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
- Add patch trying to build on SLE12: * chromium-old-glibc-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1335
2019-11-04 10:31:34 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 78.0.3904.97 boo#1156172:
* Various security fixes from internal audits, fuzzing and other
initiatives
- Add patch trying to build on SLE12: * chromium-old-glibc-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1335
2019-11-04 10:31:34 +00:00
- Update to 78.0.3904.87 bsc#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1333
2019-11-01 11:07:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 6 13:15:18 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 78.0.3904.87 bsc#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1333
2019-11-01 11:07:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Keep just one conditional for vaapi enablement
- Update to 78.0.3904.87 bsc#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1333
2019-11-01 11:07:47 +00:00
Accepting request 744163 from home:marxin:branches:network:chromium - Enable LTO again with disabled parallel LTO WPA streaming. OBS-URL: https://build.opensuse.org/request/show/744163 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1331
2019-10-31 06:20:38 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Nov 4 11:25:23 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 744163 from home:marxin:branches:network:chromium - Enable LTO again with disabled parallel LTO WPA streaming. OBS-URL: https://build.opensuse.org/request/show/744163 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1331
2019-10-31 06:20:38 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add more magic for zlib handling for SLE12 build
Accepting request 744163 from home:marxin:branches:network:chromium - Enable LTO again with disabled parallel LTO WPA streaming. OBS-URL: https://build.opensuse.org/request/show/744163 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1331
2019-10-31 06:20:38 +00:00
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1328
2019-10-25 10:51:19 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Nov 4 10:30:40 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1328
2019-10-25 10:51:19 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch trying to build on SLE12:
* chromium-old-glibc-noexcept.patch
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1328
2019-10-25 10:51:19 +00:00
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1327
2019-10-24 12:43:53 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Nov 1 10:55:52 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1327
2019-10-24 12:43:53 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 78.0.3904.87 bsc#1155643:
* CVE-2019-13721: Use-after-free in PDFium
* CVE-2019-13720: Use-after-free in audio
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1327
2019-10-24 12:43:53 +00:00
Accepting request 741097 from home:hellcp:branches:network:chromium - Use internal resources for icon and appdata OBS-URL: https://build.opensuse.org/request/show/741097 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1324
2019-10-18 17:48:19 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Oct 30 12:51:06 UTC 2019 - Martin Liška <mliska@suse.cz>
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1326
2019-10-23 13:10:24 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Enable LTO again with disabled parallel LTO WPA streaming.
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 25 10:50:35 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
the feature later when some memory consumption fixes land in
GCC
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Oct 24 12:43:15 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Adjust LDFLAGS settings for LTO to take memory-constraints into
consideration
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Oct 23 12:53:22 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 78.0.3904.70 bsc#1154806:
* CVE-2019-13699: Use-after-free in media
* CVE-2019-13700: Buffer overrun in Blink
* CVE-2019-13701: URL spoof in navigation
* CVE-2019-13702: Privilege elevation in Installer
* CVE-2019-13703: URL bar spoofing
* CVE-2019-13704: CSP bypass
* CVE-2019-13705: Extension permission bypass
* CVE-2019-13706: Out-of-bounds read in PDFium
* CVE-2019-13707: File storage disclosure
* CVE-2019-13708: HTTP authentication spoof
* CVE-2019-13709: File download protection bypass
* CVE-2019-13710: File download protection bypass
* CVE-2019-13711: Cross-context information leak
* CVE-2019-15903: Buffer overflow in expat
* CVE-2019-13713: Cross-origin data leak
* CVE-2019-13714: CSS injection
* CVE-2019-13715: Address bar spoofing
* CVE-2019-13716: Service worker state error
* CVE-2019-13717: Notification obscured
* CVE-2019-13718: IDN spoof
* CVE-2019-13719: Notification obscured
* Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
* chromium-78-gcc-enum-range.patch
* chromium-78-gcc-noexcept.patch
* chromium-78-gcc-std-vector.patch
* chromium-78-icon.patch
* chromium-78-include.patch
* chromium-78-noexcept.patch
* chromium-78-pm-crash.patch
* chromium-78-protobuf-export.patch
- Remove patches:
* chromium-77-blink-include.patch
* chromium-77-fix-gn-gen.patch
* chromium-77-gcc-abstract.patch
* chromium-77-gcc-include.patch
* chromium-77-gcc-no-opt-safe-math.patch
* chromium-77-no-cups.patch
* chromium-77-std-string.patch
* chromium-77-system-hb.patch
* chromium-77.0.3865.120.tar.xz
* chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1326
2019-10-23 13:10:24 +00:00
* chromium-system-icu.patch
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
* chromium-unbundle-zlib.patch
* chromium-vaapi-fix.patch
* chromium-vaapi.patch
* old-libva.patch
At revision 0ad55cb9e188d5926db26003b443eec9.
- Update gcc-enable-lto.patch to work on systems without the lto OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1275
2019-07-17 08:32:32 +00:00
- Update to 75.0.3770.142 bsc#1141649: * CVE-2019-5847: V8 sealed/frozen elements cause crash * CVE-2019-5848: Font sizes may expose sensitive information - Add patch chromium-renderprocess-crash.patch to hopefully fix bsc#1141102 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1274
2019-07-16 14:34:34 +00:00
Accepting request 713244 from home:marxin:branches:network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. OBS-URL: https://build.opensuse.org/request/show/713244 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1273
2019-07-03 13:21:29 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 18 09:37:21 UTC 2019 - Stasiek Michalski <hellcp@mailbox.org>
Accepting request 713244 from home:marxin:branches:network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. OBS-URL: https://build.opensuse.org/request/show/713244 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1273
2019-07-03 13:21:29 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Use internal resources for icon and appdata
Accepting request 713244 from home:marxin:branches:network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. OBS-URL: https://build.opensuse.org/request/show/713244 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1273
2019-07-03 13:21:29 +00:00
- Install manpage OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1269
2019-07-02 07:35:59 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 11 08:05:49 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Install manpage OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1269
2019-07-02 07:35:59 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 77.0.3865.120 bsc#1153660:
* CVE-2019-13693: Use-after-free in IndexedDB
* CVE-2019-13694: Use-after-free in WebRTC
* CVE-2019-13695: Use-after-free in audio
* CVE-2019-13696: Use-after-free in V8
* CVE-2019-13697: Cross-origin size leak.
* Various fixes from internal audits, fuzzing and other initiatives
- Install manpage OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1269
2019-07-02 07:35:59 +00:00
- Update to 75.0.3770.100: * This is just feature fixes update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1267
2019-06-19 12:13:37 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Sep 19 12:55:15 UTC 2019 - Jan Ritzerfeld <suse@bugs.jan.ritzerfeld.org>
- Update to 75.0.3770.100: * This is just feature fixes update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1267
2019-06-19 12:13:37 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Added patch chromium-vaapi-fix.patch again to fix boo#1146219
- Update to 75.0.3770.100: * This is just feature fixes update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1267
2019-06-19 12:13:37 +00:00
- Update to 75.0.3770.90 bsc#1137332: * CVE-2019-5842: Use-after-free in Blink. OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1264
2019-06-14 11:03:29 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Sep 18 19:45:29 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
- update to chromium 77.0.3865.90 boo#1151229:
* CVE-2019-13685: Use-after-free in UI
* CVE-2019-13688: Use-after-free in media
* CVE-2019-13687: Use-after-free in media
* CVE-2019-13686: Use-after-free in offline pages
-------------------------------------------------------------------
Mon Sep 16 09:11:11 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Add patch from Fedora for cert transparency:
* chromium-77.0.3865.75-certificate-transparency.patch
-------------------------------------------------------------------
Mon Sep 16 08:06:10 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Add patches from gentoo:
* chromium-77-clang.patch
* chromium-77-gcc-no-opt-safe-math.patch
* chromium-77-no-cups.patch
* chromium-77-std-string.patch
-------------------------------------------------------------------
Thu Sep 12 10:29:13 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update patch old-libva.patch to build on openSUSE Leap 15.0
-------------------------------------------------------------------
Thu Sep 12 08:34:01 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to chromium 77.0.3865.75 bsc#1150425:
* CVE-2019-5870: Use-after-free in media
* CVE-2019-5871: Heap overflow in Skia
* CVE-2019-5872: Use-after-free in Mojo
* CVE-2019-5874: External URIs may trigger other browsers
* CVE-2019-5875: URL bar spoof via download redirect
* CVE-2019-5876: Use-after-free in media
* CVE-2019-5877: Out-of-bounds access in V8
* CVE-2019-5878: Use-after-free in V8
* CVE-2019-5879: Extension can bypass same origin policy
* CVE-2019-5880: SameSite cookie bypass
* CVE-2019-5881: Arbitrary read in SwiftShader
* CVE-2019-13659: URL spoof
* CVE-2019-13660: Full screen notification overlap
* CVE-2019-13661: Full screen notification spoof
* CVE-2019-13662: CSP bypass
* CVE-2019-13663: IDN spoof
* CVE-2019-13664: CSRF bypass
* CVE-2019-13665: Multiple file download protection bypass
* CVE-2019-13666: Side channel using storage size estimate
* CVE-2019-13667: URI bar spoof when using external app URIs
* CVE-2019-13668: Global window leak via console
* CVE-2019-13669: HTTP authentication spoof
* CVE-2019-13670: V8 memory corruption in regex
* CVE-2019-13671: Dialog box fails to show origin
* CVE-2019-13673: Cross-origin information leak using devtools
* CVE-2019-13674: IDN spoofing
* CVE-2019-13675: Extensions can be disabled by trailing slash
* CVE-2019-13676: Google URI shown for certificate warning
* CVE-2019-13677: Chrome web store origin needs to be isolated
* CVE-2019-13678: Download dialog spoofing
* CVE-2019-13679: User gesture needed for printing
* CVE-2019-13680: IP address spoofing to servers
* CVE-2019-13681: Bypass on download restrictions
* CVE-2019-13682: Site isolation bypass
* CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
* chromium-77-blink-include.patch
* chromium-77-fix-gn-gen.patch
* chromium-77-gcc-abstract.patch
* chromium-77-gcc-include.patch
* chromium-77-system-hb.patch
* chromium-unbundle-zlib.patch
- Removed merged patches:
* chromium-76-gcc-ambiguous-nodestructor.patch
* chromium-76-gcc-blink-constexpr.patch
* chromium-76-gcc-blink-namespace1.patch
* chromium-76-gcc-blink-namespace2.patch
* chromium-76-gcc-gl-init.patch
* chromium-76-gcc-include.patch
* chromium-76-gcc-noexcept.patch
* chromium-76-gcc-private.patch
* chromium-76-gcc-pure-virtual.patch
* chromium-76-gcc-uint32.patch
* chromium-76-gcc-vulkan.patch
* chromium-76-quiche.patch
* chromium-angle-inline.patch
* chromium-fix-char_traits.patch
* chromium-skia-aarch64-buildfix.patch
* chromium-vaapi-fix.patch
* gcc-lto-rsp-clobber.patch
- Refreshed patches:
* chromium-prop-codecs.patch
* chromium-system-icu.patch
* chromium-vaapi.patch
* old-libva.patch
-------------------------------------------------------------------
Tue Sep 3 12:52:13 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
* CVE-2019-5869: Use-after-free in Blink
* Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch
-------------------------------------------------------------------
Mon Aug 19 17:44:00 UTC 2019 - Jan Ritzerfeld <suse@bugs.jan.ritzerfeld.org>
- Added patch chromium-vaapi-fix.patch to fix boo#1146219
-------------------------------------------------------------------
Mon Aug 12 10:25:15 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 76.0.3809.100 bsc#1145242:
* CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
* CVE-2019-5867: Out-of-bounds read in V8
-------------------------------------------------------------------
Thu Aug 8 07:27:14 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Add patches to fix few compilation issues:
* chromium-angle-inline.patch
* chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
* chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
just bloats the buildlog (from debian)
-------------------------------------------------------------------
Fri Aug 2 08:41:33 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 76.0.3809.87 bsc#1143492:
* CVE-2019-5850: Use-after-free in offline page fetcher
* CVE-2019-5860: Use-after-free in PDFium
* CVE-2019-5853: Memory corruption in regexp length check
* CVE-2019-5851: Use-after-poison in offline audio context
* CVE-2019-5859: res: URIs can load alternative browsers
* CVE-2019-5856: Insufficient checks on filesystem: URI permissions
* CVE-2019-5855: Integer overflow in PDFium
* CVE-2019-5865: Site isolation bypass from compromised renderer
* CVE-2019-5858: Insufficient filtering of Open URL service parameters
* CVE-2019-5864: Insufficient port filtering in CORS for extensions
* CVE-2019-5862: AppCache not robust to compromised renderers
* CVE-2019-5861: Click location incorrectly checked
* CVE-2019-5857: Comparison of -0 and null yields crash
* CVE-2019-5854: Integer overflow in PDFium text rendering
* CVE-2019-5852: Object leak of utility functions
* Various fixes from internal audits, fuzzing and other initiatives
* Not affected:
+ CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
* chromium-76-gcc-ambiguous-nodestructor.patch
* chromium-76-gcc-blink-constexpr.patch
* chromium-76-gcc-blink-namespace1.patch
* chromium-76-gcc-blink-namespace2.patch
* chromium-76-gcc-gl-init.patch
* chromium-76-gcc-include.patch
* chromium-76-gcc-noexcept.patch
* chromium-76-gcc-private.patch
* chromium-76-gcc-pure-virtual.patch
* chromium-76-gcc-uint32.patch
* chromium-76-gcc-vulkan.patch
* chromium-76-quiche.patch
- Removed patches:
* chromium-non-void-return.patch
* chromium-75.0.3770.80-SIOCGSTAMP.patch
* chromium-75.0.3770.80-pure-virtual-crash-fix.patch
* chromium-gcc.patch
* chromium-renderprocess-crash.patch
* chromium-skia-system-fontconfig.patch
- Refreshed patches:
* chromium-dma-buf.patch
* chromium-drm.patch
* chromium-libusb_interrupt_event_handler.patch
* chromium-skia-aarch64-buildfix.patch
* chromium-system-icu.patch
* chromium-vaapi.patch
* old-libva.patch
- Update to 73.0.3683.86: * Just feature fixes around OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1238
2019-03-25 10:54:48 +00:00
- Update conditions to use system harfbuzz on TW+ - Require java during build - Enable using pipewire when available OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1236
2019-03-21 11:04:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 30 12:47:02 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Do not use lto flags from prjconf, we need to set them using
gn buildsystem
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 30 10:07:34 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Drop patch chromium-non-void-return.patch and just pass
a cxxflags disabler for the check
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jul 17 08:31:56 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update gcc-enable-lto.patch to work on systems without the
lto
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 16 14:26:18 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 75.0.3770.142 bsc#1141649:
* CVE-2019-5847: V8 sealed/frozen elements cause crash
* CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
bsc#1141102
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 2 08:55:22 UTC 2019 - Martin Liška <mliska@suse.cz>
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Enable LTO for x86_64 - add gcc-enable-lto.patch and
gcc-lto-rsp-clobber.patch patches.
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 2 07:35:44 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Install manpage
- Tweak fix_building_widevinecdm_with_chromium.patch to make it work again bsc#1120429 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1215
2019-01-02 08:31:04 +00:00
Accepting request 657998 from home:Guillaume_G:branches:network:chromium - Update %arm build, but keep it disabled for now, as ld requires lots of RAM OBS-URL: https://build.opensuse.org/request/show/657998 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1213
2018-12-18 15:06:23 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jun 19 11:55:13 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Version update to 71.0.3578.98 bsc#1119364: * CVE-2018-17481: Use after free in PDFium OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1210
2018-12-13 14:55:29 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 75.0.3770.100:
* This is just feature fixes update
- Version update to 71.0.3578.98 bsc#1119364: * CVE-2018-17481: Use after free in PDFium OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1210
2018-12-13 14:55:29 +00:00
Accepting request 657328 from home:Guillaume_G:branches:network:chromium - Increase %limit_build value to avoid OOM OBS-URL: https://build.opensuse.org/request/show/657328 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1208
2018-12-11 21:04:21 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 14 10:56:48 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
* CVE-2019-5842: Use-after-free in Blink.
Accepting request 657328 from home:Guillaume_G:branches:network:chromium - Increase %limit_build value to avoid OOM OBS-URL: https://build.opensuse.org/request/show/657328 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1208
2018-12-11 21:04:21 +00:00
- Add patch to build on Leap 42.x: * chromium-old-libva.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1203
2018-12-06 14:13:38 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jun 11 06:47:26 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
declaration:
* chromium-75.0.3770.80-SIOCGSTAMP.patch
* chromium-75.0.3770.80-pure-virtual-crash-fix.patch
- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478 * CVE-2018-17478: Out of bounds memory access in V8 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1196
2018-11-14 10:06:19 +00:00
- Update to 72.0.3626.81 bsc#1123641: * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12 * CVE-2019-5782: Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16 * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10 * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14 * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15 * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11 * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05 * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05 * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13 * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31 * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13 * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09 * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16 * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20 * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06 * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24 * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11 * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by hemidallt@ on 2018-11-27 * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12 * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26 * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24 * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11 * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18 * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14 * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04 * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02 * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11 * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03 * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1218
2019-01-30 09:12:20 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Jun 8 06:53:44 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update old-libva.patch to make sure we build on Leap 42.3
- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478 * CVE-2018-17478: Out of bounds memory access in V8 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1196
2018-11-14 10:06:19 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 7 19:49:23 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 75.0.3770.80 bsc#1137332:
* CVE-2019-5828: Use after free in ServiceWorker
* CVE-2019-5829: Use after free in Download Manager
* CVE-2019-5830: Incorrectly credentialed requests in CORS
* CVE-2019-5831: Incorrect map processing in V8
* CVE-2019-5832: Incorrect CORS handling in XHR
* CVE-2019-5833: Inconsistent security UI placemen
* CVE-2019-5835: Out of bounds read in Swiftshader
* CVE-2019-5836: Heap buffer overflow in Angle
* CVE-2019-5837: Cross-origin resources size disclosure in Appcache
* CVE-2019-5838: Overly permissive tab access in Extensions
* CVE-2019-5839: Incorrect handling of certain code points in Blink
* CVE-2019-5840: Popup blocker bypass
* Various fixes from internal audits, fuzzing and other initiatives
* CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
* 00-basevalue.patch
* 01-basevalue.patch
* 02-basevalue.patch
* 03-basevalue.patch
* 04-basevalue.patch
* 05-basevalue.patch
* 06-basevalue.patch
* chromium-fix-crc32-for-aarch64.patch
* quic.patch
- Update patches:
* chromium-gcc.patch
* chromium-non-void-return.patch
* chromium-vaapi.patch
* old-libva.patch
Accepting request 646219 from home:guoyunhe:branches:network:chromium - Remove noto-emoji-fonts recommends. noto-emoji-fonts has been inactive for a long time. noto-coloremoji-fonts is the current recommended emoji fonts from noto. And noto-emoji-fonts (monochrome) disables noto-coloremoji-fonts (colorful). OBS-URL: https://build.opensuse.org/request/show/646219 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1194
2018-11-04 09:31:48 +00:00
- Update to 70.0.3538.77: * Few feature fixes only OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1189
2018-10-25 09:11:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue May 28 07:48:51 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 70.0.3538.77: * Few feature fixes only OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1189
2018-10-25 09:11:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 74.0.3729.169:
* Feature fixes update only
- Update to 70.0.3538.77: * Few feature fixes only OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1189
2018-10-25 09:11:11 +00:00
- Add patch trying to get the pkg to build with libva 1.x releases: * chromium-libva1.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1185
2018-10-22 11:43:58 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sun May 19 09:53:53 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
- Add patch trying to get the pkg to build with libva 1.x releases: * chromium-libva1.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1185
2018-10-22 11:43:58 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 74.0.3729.157:
* Various security fixes from internal audits, fuzzing and other
initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
* CVE-2019-5827: Out-of-bounds access in SQLite
* CVE-2019-5824: Parameter passing error in media player
- Add patch trying to get the pkg to build with libva 1.x releases: * chromium-libva1.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1185
2018-10-22 11:43:58 +00:00
- Add back chromium-old-glibc.patch to make sure we build on 42.3 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1182
2018-10-19 12:44:38 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue May 7 09:18:05 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add back chromium-old-glibc.patch to make sure we build on 42.3 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1182
2018-10-19 12:44:38 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to fix build on aarch64:
* chromium-fix-crc32-for-aarch64.patch
- Add back chromium-old-glibc.patch to make sure we build on 42.3 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1182
2018-10-19 12:44:38 +00:00
- remove trigger word from spec that trips up legal-auto OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1184
2018-10-19 12:53:28 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Apr 30 09:04:56 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- remove trigger word from spec that trips up legal-auto OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1184
2018-10-19 12:53:28 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 74.0.3729.108 bsc#1133313:
* CVE-2019-5805: Use after free in PDFium
* CVE-2019-5806: Integer overflow in Angle
* CVE-2019-5807: Memory corruption in V8
* CVE-2019-5808: Use after free in Blink
* CVE-2019-5809: Use after free in Blink
* CVE-2019-5810: User information disclosure in Autofill
* CVE-2019-5811: CORS bypass in Blink
* CVE-2019-5813: Out of bounds read in V8
* CVE-2019-5814: CORS bypass in Blink
* CVE-2019-5815: Heap buffer overflow in Blink
* CVE-2019-5818: Uninitialized value in media reader
* CVE-2019-5819: Incorrect escaping in developer tools
* CVE-2019-5820: Integer overflow in PDFium
* CVE-2019-5821: Integer overflow in PDFium
* CVE-2019-5822: CORS bypass in download manager
* CVE-2019-5823: Forced navigation from service worker
* CVE-2019-5812: URL spoof in Omnibox on iOS
* CVE-2019-5816: Exploit persistence extension on Android
* CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
* 00-basevalue.patch
* 01-basevalue.patch
* 02-basevalue.patch
* 03-basevalue.patch
* 04-basevalue.patch
* 05-basevalue.patch
* 06-basevalue.patch
* old-libva.patch
* quic.patch
- Remove patches:
* chromium-73.0.3683.75-pipewire-cstring-fix.patch
* chromium-fix_crashpad.patch
* chromium-fix_swiftshader.patch
* chromium-old-libva.patch
- Rebase patches:
* chromium-gcc.patch
* chromium-non-void-return.patch
* chromium-old-glibc.patch
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Apr 5 08:47:35 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 73.0.3686.103:
* Various feature fixes
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Mar 25 13:49:17 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch for pipewire build:
* chromium-73.0.3683.75-pipewire-cstring-fix.patch
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Mar 25 10:54:06 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 73.0.3683.86:
* Just feature fixes around
- Refresh patch:
* chromium-non-void-return.patch
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Mar 21 11:00:28 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one
-------------------------------------------------------------------
Wed Mar 13 10:19:38 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 73.0.3683.75 bsc#1129059:
* CVE-2019-5844 CVE-2019-5845 CVE-2019-5846
* CVE-2019-5787: Use after free in Canvas.
* CVE-2019-5788: Use after free in FileAPI.
* CVE-2019-5789: Use after free in WebMIDI.
* CVE-2019-5790: Heap buffer overflow in V8.
* CVE-2019-5791: Type confusion in V8.
* CVE-2019-5792: Integer overflow in PDFium.
* CVE-2019-5793: Excessive permissions for private API in Extensions.
* CVE-2019-5794: Security UI spoofing.
* CVE-2019-5795: Integer overflow in PDFium.
* CVE-2019-5796: Race condition in Extensions.
* CVE-2019-5797: Race condition in DOMStorage.
* CVE-2019-5798: Out of bounds read in Skia.
* CVE-2019-5799: CSP bypass with blob URL.
* CVE-2019-5800: CSP bypass with blob URL.
* CVE-2019-5801: Incorrect Omnibox display on iOS.
* CVE-2019-5802: Security UI spoofing.
* CVE-2019-5803: CSP bypass with Javascript URLs'.
* CVE-2019-5804: Command line command injection on Windows.
- Update patches:
* chromium-buildname.patch
* chromium-non-void-return.patch
* chromium-old-glibc.patch
* chromium-old-libva.patch
* chromium-vaapi.patch
- Removed patches:
* chromium-crashpad-fix_aarch64.patch
* chromium-webrtc-includes.patch
- Added patches:
* chromium-gcc.patch
* chromium-fix_crashpad.patch
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Mar 4 09:31:41 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Drop direct dependency on libgsm, we just need the devel
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Mar 2 14:46:23 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 72.0.3626.121:
* fixes bsc#1127602 CVE-2019-5786
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Feb 25 10:25:40 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 72.0.3626.119:
* Feature fixes update only
- Update to 70.0.3538.67 bsc#1112111: * CVE-2018-17462: Sandbox escape in AppCache * CVE-2018-17463: Remote code execution in V8 * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium * CVE-2018-17464: URL spoof in Omnibox * CVE-2018-17465: Use after free in V8 * CVE-2018-17466: Memory corruption in Angle * CVE-2018-17467: URL spoof in Omnibox * CVE-2018-17468: Cross-origin URL disclosure in Blink * CVE-2018-17469: Heap buffer overflow in PDFium * CVE-2018-17470: Memory corruption in GPU Internals * CVE-2018-17471: Security UI occlusion in full screen mode * CVE-2018-17472: iframe sandbox escape on iOS * CVE-2018-17473: URL spoof in Omnibox * CVE-2018-17474: Use after free in Blink * CVE-2018-17475: URL spoof in Omnibox * CVE-2018-17476: Security UI occlusion in full screen mode * CVE-2018-5179: Lack of limits on update() in ServiceWorker * CVE-2018-17477: UI spoof in Extensions - Added patches: * chromium-gcc8-constexpr.patch * chromium-libusb_interrupt_event_handler.patch * chromium-pdfium-include.patch * chromium-system-libusb.patch - Removed patches: * chromium-old-glibc.patch * chromium-vpx-aarch64.patch - Updated patches: * chromium-gcc8-alignof.patch * chromium-non-void-return.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1179
2018-10-17 08:16:52 +00:00
Accepting request 655505 from network:chromium - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Update chromium-non-void-return.patch and use __builtin_abort for switch cases of out of enum ranges. - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Enable build on AArch64 OBS-URL: https://build.opensuse.org/request/show/655505 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1200
2018-12-06 08:33:56 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Feb 20 14:07:27 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 72.0.3626.109 bsc#1120892 CVE-2018-20073:
* This is just feature fixes update
Accepting request 655505 from network:chromium - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Update chromium-non-void-return.patch and use __builtin_abort for switch cases of out of enum ranges. - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Enable build on AArch64 OBS-URL: https://build.opensuse.org/request/show/655505 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1200
2018-12-06 08:33:56 +00:00
- Version update to 71.0.3578.80 bsc#1118529: - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium - CVE-2018-18337: Use after free in Blink - CVE-2018-18338: Heap buffer overflow in Canvas - CVE-2018-18339: Use after free in WebAudio - CVE-2018-18340: Use after free in MediaRecorder - CVE-2018-18341: Heap buffer overflow in Blink - CVE-2018-18342: Out of bounds write in V8 - CVE-2018-18343: Use after free in Skia - CVE-2018-18344: Inappropriate implementation in Extensions - Multiple issues in SQLite via WebSQL - CVE-2018-18345: Inappropriate implementation in Site Isolation - CVE-2018-18346: Incorrect security UI in Blink - CVE-2018-18347: Inappropriate implementation in Navigation - CVE-2018-18348: Inappropriate implementation in Omnibox - CVE-2018-18349: Insufficient policy enforcement in Blink - CVE-2018-18350: Insufficient policy enforcement in Blink - CVE-2018-18351: Insufficient policy enforcement in Navigation - CVE-2018-18352: Inappropriate implementation in Media - CVE-2018-18353: Inappropriate implementation in Network Authentication - CVE-2018-18354: Insufficient data validation in Shell Integration - CVE-2018-18355: Insufficient policy enforcement in URL Formatter - CVE-2018-18356: Use after free in Skia - CVE-2018-18357: Insufficient policy enforcement in URL Formatter - CVE-2018-18358: Insufficient policy enforcement in Proxy. - CVE-2018-18359: Out of bounds read in V8 - Inappropriate implementation in PDFium OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1201
2018-12-06 08:45:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Feb 11 08:42:01 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Version update to 71.0.3578.80 bsc#1118529: - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium - CVE-2018-18337: Use after free in Blink - CVE-2018-18338: Heap buffer overflow in Canvas - CVE-2018-18339: Use after free in WebAudio - CVE-2018-18340: Use after free in MediaRecorder - CVE-2018-18341: Heap buffer overflow in Blink - CVE-2018-18342: Out of bounds write in V8 - CVE-2018-18343: Use after free in Skia - CVE-2018-18344: Inappropriate implementation in Extensions - Multiple issues in SQLite via WebSQL - CVE-2018-18345: Inappropriate implementation in Site Isolation - CVE-2018-18346: Incorrect security UI in Blink - CVE-2018-18347: Inappropriate implementation in Navigation - CVE-2018-18348: Inappropriate implementation in Omnibox - CVE-2018-18349: Insufficient policy enforcement in Blink - CVE-2018-18350: Insufficient policy enforcement in Blink - CVE-2018-18351: Insufficient policy enforcement in Navigation - CVE-2018-18352: Inappropriate implementation in Media - CVE-2018-18353: Inappropriate implementation in Network Authentication - CVE-2018-18354: Insufficient data validation in Shell Integration - CVE-2018-18355: Insufficient policy enforcement in URL Formatter - CVE-2018-18356: Use after free in Skia - CVE-2018-18357: Insufficient policy enforcement in URL Formatter - CVE-2018-18358: Insufficient policy enforcement in Proxy. - CVE-2018-18359: Out of bounds read in V8 - Inappropriate implementation in PDFium OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1201
2018-12-06 08:45:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 72.0.3626.96 bsc#1124936:
* CVE-2019-5784: Inappropriate implementation in V8
- Version update to 69.0.3497.81 bsc#1107235: * CVE-2018-16065: Out of bounds write in V8 * CVE-2018-16066:Out of bounds read in Blink * CVE-2018-16067: Out of bounds read in WebAudio * CVE-2018-16068: Out of bounds write in Mojo * CVE-2018-16069:Out of bounds read in SwiftShader * CVE-2018-16070: Integer overflow in Skia * CVE-2018-16071: Use after free in WebRTC * CVE-2018-16073: Site Isolation bypass after tab restore * CVE-2018-16074: Site Isolation bypass using Blob URLS * Out of bounds read in Little-CMS * CVE-2018-16075: Local file access in Blink * CVE-2018-16076: Out of bounds read in PDFium * CVE-2018-16077: Content security policy bypass in Blink * CVE-2018-16078: Credit card information leak in Autofill * CVE-2018-16079: URL spoof in permission dialogs * CVE-2018-16080: URL spoof in full screen mode * CVE-2018-16081: Local file access in DevTools * CVE-2018-16082: Stack buffer overflow in SwiftShader * CVE-2018-16083: Out of bounds read in WebRTC * CVE-2018-16084: User confirmation bypass in external protocol handling * CVE-2018-16085: Use after free in Memory Instrumentation - Added patches: * chromium-old-glibc.patch * chromium-system-icu.patch * chromium-warnings.patch - Removed patches: * chromium-cors-string.patch * chromium-crashpad-aarch64-fix.patch * chromium-ffmpeg.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1160
2018-09-06 09:12:59 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Feb 11 04:35:53 UTC 2019 - Simon Lees <sflees@suse.de>
- Version update to 69.0.3497.81 bsc#1107235: * CVE-2018-16065: Out of bounds write in V8 * CVE-2018-16066:Out of bounds read in Blink * CVE-2018-16067: Out of bounds read in WebAudio * CVE-2018-16068: Out of bounds write in Mojo * CVE-2018-16069:Out of bounds read in SwiftShader * CVE-2018-16070: Integer overflow in Skia * CVE-2018-16071: Use after free in WebRTC * CVE-2018-16073: Site Isolation bypass after tab restore * CVE-2018-16074: Site Isolation bypass using Blob URLS * Out of bounds read in Little-CMS * CVE-2018-16075: Local file access in Blink * CVE-2018-16076: Out of bounds read in PDFium * CVE-2018-16077: Content security policy bypass in Blink * CVE-2018-16078: Credit card information leak in Autofill * CVE-2018-16079: URL spoof in permission dialogs * CVE-2018-16080: URL spoof in full screen mode * CVE-2018-16081: Local file access in DevTools * CVE-2018-16082: Stack buffer overflow in SwiftShader * CVE-2018-16083: Out of bounds read in WebRTC * CVE-2018-16084: User confirmation bypass in external protocol handling * CVE-2018-16085: Use after free in Memory Instrumentation - Added patches: * chromium-old-glibc.patch * chromium-system-icu.patch * chromium-warnings.patch - Removed patches: * chromium-cors-string.patch * chromium-crashpad-aarch64-fix.patch * chromium-ffmpeg.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1160
2018-09-06 09:12:59 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Provide web_browser so chromium can be installed instead of firefox.
- Version update to 69.0.3497.81 bsc#1107235: * CVE-2018-16065: Out of bounds write in V8 * CVE-2018-16066:Out of bounds read in Blink * CVE-2018-16067: Out of bounds read in WebAudio * CVE-2018-16068: Out of bounds write in Mojo * CVE-2018-16069:Out of bounds read in SwiftShader * CVE-2018-16070: Integer overflow in Skia * CVE-2018-16071: Use after free in WebRTC * CVE-2018-16073: Site Isolation bypass after tab restore * CVE-2018-16074: Site Isolation bypass using Blob URLS * Out of bounds read in Little-CMS * CVE-2018-16075: Local file access in Blink * CVE-2018-16076: Out of bounds read in PDFium * CVE-2018-16077: Content security policy bypass in Blink * CVE-2018-16078: Credit card information leak in Autofill * CVE-2018-16079: URL spoof in permission dialogs * CVE-2018-16080: URL spoof in full screen mode * CVE-2018-16081: Local file access in DevTools * CVE-2018-16082: Stack buffer overflow in SwiftShader * CVE-2018-16083: Out of bounds read in WebRTC * CVE-2018-16084: User confirmation bypass in external protocol handling * CVE-2018-16085: Use after free in Memory Instrumentation - Added patches: * chromium-old-glibc.patch * chromium-system-icu.patch * chromium-warnings.patch - Removed patches: * chromium-cors-string.patch * chromium-crashpad-aarch64-fix.patch * chromium-ffmpeg.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1160
2018-09-06 09:12:59 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jan 30 08:58:19 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 625370 from home:Guillaume_G:branches:network:chromium - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch OBS-URL: https://build.opensuse.org/request/show/625370 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1152
2018-07-26 06:44:03 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 72.0.3626.81 bsc#1123641:
* CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
* CVE-2019-5782: Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
* CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
* CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
* CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
* CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
* CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
* CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
* CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
* CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
* CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
* CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
* CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
* CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
* CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
* CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
* CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
* CVE-2019-5770: Heap buffer overflow in WebGL. Reported by hemidallt@ on 2018-11-27
* CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
* CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
* CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
* CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
* CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
* CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
* CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
* CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
* CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
* CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
* CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
* chromium-crashpad-fix_aarch64.patch
* chromium-fix_swiftshader.patch
* chromium-webrtc-includes.patch
- Obsoleted patches:
* chromium-gcc8-alignof.patch
* chromium-initialize-list.patch
- Updated patches:
* chromium-dma-buf.patch
* chromium-non-void-return.patch
* chromium-skia-system-fontconfig.patch
* chromium-system-icu.patch
* chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
scheduled state
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Add patch to build under gcc8: * chromium-gcc8.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1137
2018-06-15 19:52:10 +00:00
Accepting request 616575 from home:AndreasStieger:branches:network:chromium Chromium 67.0.3396.87: * CVE-2018-6149: Out of bounds write in V8 (boo#1097452) OBS-URL: https://build.opensuse.org/request/show/616575 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1136
2018-06-13 16:02:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jan 2 08:30:23 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 616575 from home:AndreasStieger:branches:network:chromium Chromium 67.0.3396.87: * CVE-2018-6149: Out of bounds write in V8 (boo#1097452) OBS-URL: https://build.opensuse.org/request/show/616575 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1136
2018-06-13 16:02:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Tweak fix_building_widevinecdm_with_chromium.patch to make it
work again bsc#1120429
Accepting request 616575 from home:AndreasStieger:branches:network:chromium Chromium 67.0.3396.87: * CVE-2018-6149: Out of bounds write in V8 (boo#1097452) OBS-URL: https://build.opensuse.org/request/show/616575 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1136
2018-06-13 16:02:16 +00:00
Accepting request 615035 from home:AndreasStieger:branches:network:chromium - Chromium 67.0.3396.79: * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508) OBS-URL: https://build.opensuse.org/request/show/615035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1135
2018-06-08 04:17:04 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Dec 14 08:51:26 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Accepting request 615035 from home:AndreasStieger:branches:network:chromium - Chromium 67.0.3396.79: * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508) OBS-URL: https://build.opensuse.org/request/show/615035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1135
2018-06-08 04:17:04 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update %arm build, but keep it disabled for now, as ld requires
lots of RAM
Accepting request 615035 from home:AndreasStieger:branches:network:chromium - Chromium 67.0.3396.79: * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508) OBS-URL: https://build.opensuse.org/request/show/615035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1135
2018-06-08 04:17:04 +00:00
- Require ffmpeg >= 4.0 bsc#1095545 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1134
2018-06-01 17:46:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Dec 13 11:22:25 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
- Require ffmpeg >= 4.0 bsc#1095545 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1134
2018-06-01 17:46:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 71.0.3578.98 bsc#1119364:
* CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch
- Require ffmpeg >= 4.0 bsc#1095545 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1134
2018-06-01 17:46:47 +00:00
Accepting request 612433 from home:AndreasStieger:branches:network:chromium - on SLE 12 with SUSE PackageHub 12, do not require the SDK for libwebpmux1 (bsc#1070421) OBS-URL: https://build.opensuse.org/request/show/612433 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1130
2018-05-27 05:20:49 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Dec 7 14:32:25 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Accepting request 612433 from home:AndreasStieger:branches:network:chromium - on SLE 12 with SUSE PackageHub 12, do not require the SDK for libwebpmux1 (bsc#1070421) OBS-URL: https://build.opensuse.org/request/show/612433 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1130
2018-05-27 05:20:49 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Increase %limit_build value to avoid OOM
Accepting request 612433 from home:AndreasStieger:branches:network:chromium - on SLE 12 with SUSE PackageHub 12, do not require the SDK for libwebpmux1 (bsc#1070421) OBS-URL: https://build.opensuse.org/request/show/612433 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1130
2018-05-27 05:20:49 +00:00
Accepting request 612364 from home:AndreasStieger:branches:network:chromium Fix installation issue on SUSE PackageHub 12 with libminizip1 (bsc#1093031) OBS-URL: https://build.opensuse.org/request/show/612364 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1129
2018-05-26 11:09:04 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Dec 6 14:13:10 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
- Add patch to build on Leap 42.x:
* chromium-old-libva.patch
-------------------------------------------------------------------
Thu Dec 6 08:41:53 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
- Version update to 71.0.3578.80 bsc#1118529:
- CVE-2018-17480: Out of bounds write in V8
- CVE-2018-17481: Use after frees in PDFium
- CVE-2018-18335: Heap buffer overflow in Skia
- CVE-2018-18336: Use after free in PDFium
- CVE-2018-18337: Use after free in Blink
- CVE-2018-18338: Heap buffer overflow in Canvas
- CVE-2018-18339: Use after free in WebAudio
- CVE-2018-18340: Use after free in MediaRecorder
- CVE-2018-18341: Heap buffer overflow in Blink
- CVE-2018-18342: Out of bounds write in V8
- CVE-2018-18343: Use after free in Skia
- CVE-2018-18344: Inappropriate implementation in Extensions
- Multiple issues in SQLite via WebSQL
- CVE-2018-18345: Inappropriate implementation in Site Isolation
- CVE-2018-18346: Incorrect security UI in Blink
- CVE-2018-18347: Inappropriate implementation in Navigation
- CVE-2018-18348: Inappropriate implementation in Omnibox
- CVE-2018-18349: Insufficient policy enforcement in Blink
- CVE-2018-18350: Insufficient policy enforcement in Blink
- CVE-2018-18351: Insufficient policy enforcement in Navigation
- CVE-2018-18352: Inappropriate implementation in Media
- CVE-2018-18353: Inappropriate implementation in Network Authentication
- CVE-2018-18354: Insufficient data validation in Shell Integration
- CVE-2018-18355: Insufficient policy enforcement in URL Formatter
- CVE-2018-18356: Use after free in Skia
- CVE-2018-18357: Insufficient policy enforcement in URL Formatter
- CVE-2018-18358: Insufficient policy enforcement in Proxy.
- CVE-2018-18359: Out of bounds read in V8
- Inappropriate implementation in PDFium
- Use after free in Extensions
- Inappropriate implementation in Navigation
- Insufficient policy enforcement in Navigation
- Insufficient policy enforcement in URL Formatter
- Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
* fix_building_widevinecdm_with_chromium.patch
* chromium-vaapi.patch
* chromium-skia-aarch64-buildfix.patch
* chromium-prop-codecs.patch
* chromium-non-void-return.patch
- Removed patches:
* chromium-gcc8-constexpr.patch
* chromium-libva1.patch
* chromium-pdfium-include.patch
* chromium-warnings.patch
- Added patches:
* chromium-initialize-list.patch
Accepting request 612364 from home:AndreasStieger:branches:network:chromium Fix installation issue on SUSE PackageHub 12 with libminizip1 (bsc#1093031) OBS-URL: https://build.opensuse.org/request/show/612364 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1129
2018-05-26 11:09:04 +00:00
Accepting request 609001 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.181 OBS-URL: https://build.opensuse.org/request/show/609001 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1127
2018-05-16 07:48:41 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 21 09:09:28 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 609001 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.181 OBS-URL: https://build.opensuse.org/request/show/609001 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1127
2018-05-16 07:48:41 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 70.0.3538.110 bsc#1116608:
* CVE-2018-17479: Use-after-free in GPU
Accepting request 609001 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.181 OBS-URL: https://build.opensuse.org/request/show/609001 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1127
2018-05-16 07:48:41 +00:00
Accepting request 606435 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.170 (bsc#1092923) OBS-URL: https://build.opensuse.org/request/show/606435 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1125
2018-05-11 12:31:02 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 14 09:42:33 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 606435 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.170 (bsc#1092923) OBS-URL: https://build.opensuse.org/request/show/606435 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1125
2018-05-11 12:31:02 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
* CVE-2018-17478: Out of bounds memory access in V8
Accepting request 606435 from home:AndreasStieger:branches:network:chromium Chromium 66.0.3359.170 (bsc#1092923) OBS-URL: https://build.opensuse.org/request/show/606435 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1125
2018-05-11 12:31:02 +00:00
- Add patch chromium-skia-system-fontconfig.patch to fix bsc#1092272 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1123
2018-05-09 08:39:35 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Nov 3 21:18:07 UTC 2018 - Yunhe Guo <i@guoyunhe.me>
- Add patch chromium-skia-system-fontconfig.patch to fix bsc#1092272 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1123
2018-05-09 08:39:35 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
inactive for a long time. noto-coloremoji-fonts is the current
recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
disables noto-coloremoji-fonts (colorful).
- Add patch chromium-skia-system-fontconfig.patch to fix bsc#1092272 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1123
2018-05-09 08:39:35 +00:00
Accepting request 605672 from home:Guillaume_G:branches:openSUSE:Factory:ARM - Enable build on AArch64 - Fix build on AArch64: * set target_cpu to arm64 * disable tcmalloc and swiftshader for aarch64 * Add new patches: - chromium-65.0.3325.162-skia-aarch64-buildfix.patch - chromium-skia-neon.patch OBS-URL: https://build.opensuse.org/request/show/605672 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1122
2018-05-09 08:24:10 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Oct 25 09:07:47 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 613035 from network:chromium - Up to 67.0.3396.62 - Up to chromium-67.0.3396.56 - Fix SLE12 builds again - Bump to 67.0.3396.48 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 67.0.3393.40 - Extend patch chromium-non-void-return.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch - Rebase fix_building_widevinecdm_with_chromium.patch to allow widevine builds - Bump to 66.0.3359.33 - Version bump to 66.0.3359.26 OBS-URL: https://build.opensuse.org/request/show/613035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1132
2018-05-30 11:15:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 70.0.3538.77:
* Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch
Accepting request 613035 from network:chromium - Up to 67.0.3396.62 - Up to chromium-67.0.3396.56 - Fix SLE12 builds again - Bump to 67.0.3396.48 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 67.0.3393.40 - Extend patch chromium-non-void-return.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch - Rebase fix_building_widevinecdm_with_chromium.patch to allow widevine builds - Bump to 66.0.3359.33 - Version bump to 66.0.3359.26 OBS-URL: https://build.opensuse.org/request/show/613035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1132
2018-05-30 11:15:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Oct 22 11:43:26 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch trying to get the pkg to build with libva 1.x releases:
* chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 19 12:43:06 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 19 09:58:46 UTC 2018 - astieger@suse.com
Accepting request 605672 from home:Guillaume_G:branches:openSUSE:Factory:ARM - Enable build on AArch64 - Fix build on AArch64: * set target_cpu to arm64 * disable tcmalloc and swiftshader for aarch64 * Add new patches: - chromium-65.0.3325.162-skia-aarch64-buildfix.patch - chromium-skia-neon.patch OBS-URL: https://build.opensuse.org/request/show/605672 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1122
2018-05-09 08:24:10 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- remove trigger word from spec that trips up legal-auto
- Bundle the harfbuzz on < 15.0 release as we would have to use requires_ge for the library itself later on otherwise OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1102
2018-03-14 09:01:19 +00:00
Accepting request 613035 from network:chromium - Up to 67.0.3396.62 - Up to chromium-67.0.3396.56 - Fix SLE12 builds again - Bump to 67.0.3396.48 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 67.0.3393.40 - Extend patch chromium-non-void-return.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch - Rebase fix_building_widevinecdm_with_chromium.patch to allow widevine builds - Bump to 66.0.3359.33 - Version bump to 66.0.3359.26 OBS-URL: https://build.opensuse.org/request/show/613035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1132
2018-05-30 11:15:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Oct 17 08:07:37 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 613035 from network:chromium - Up to 67.0.3396.62 - Up to chromium-67.0.3396.56 - Fix SLE12 builds again - Bump to 67.0.3396.48 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 67.0.3393.40 - Extend patch chromium-non-void-return.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch - Rebase fix_building_widevinecdm_with_chromium.patch to allow widevine builds - Bump to 66.0.3359.33 - Version bump to 66.0.3359.26 OBS-URL: https://build.opensuse.org/request/show/613035 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1132
2018-05-30 11:15:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 70.0.3538.67 bsc#1112111:
* CVE-2018-17462: Sandbox escape in AppCache
* CVE-2018-17463: Remote code execution in V8
* CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
* CVE-2018-17464: URL spoof in Omnibox
* CVE-2018-17465: Use after free in V8
* CVE-2018-17466: Memory corruption in Angle
* CVE-2018-17467: URL spoof in Omnibox
* CVE-2018-17468: Cross-origin URL disclosure in Blink
* CVE-2018-17469: Heap buffer overflow in PDFium
* CVE-2018-17470: Memory corruption in GPU Internals
* CVE-2018-17471: Security UI occlusion in full screen mode
* CVE-2018-17472: iframe sandbox escape on iOS
* CVE-2018-17473: URL spoof in Omnibox
* CVE-2018-17474: Use after free in Blink
* CVE-2018-17475: URL spoof in Omnibox
* CVE-2018-17476: Security UI occlusion in full screen mode
* CVE-2018-5179: Lack of limits on update() in ServiceWorker
* CVE-2018-17477: UI spoof in Extensions
- Added patches:
* chromium-gcc8-constexpr.patch
* chromium-libusb_interrupt_event_handler.patch
* chromium-pdfium-include.patch
* chromium-system-libusb.patch
- Removed patches:
* chromium-old-glibc.patch
* chromium-vpx-aarch64.patch
- Updated patches:
* chromium-gcc8-alignof.patch
* chromium-non-void-return.patch
* chromium-prop-codecs.patch
* chromium-sandbox-pie.patch
* chromium-skia-system-fontconfig.patch
* chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Sep 18 09:29:55 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 625247 from network:chromium - Bump to 68.0.3440.75 - Up to chromium-68.0.3440.68 - Up to 68.0.3440.59 - Up to 68.0.3440.42 - Bump 68.0.3440.33 - Up to 68.0.3440.25 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch - Bump to 67.0.3386.1 - Bump to 67.0.3381.1 - Bump to 67.0.3377.1 - Bump to 67.0.3371.0 - Remove no longer needed chromium-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/625247 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1144
2018-07-25 09:58:33 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Keep blank line after autopatch to make SLE12 rpm macros happy
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Sep 18 07:27:09 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 69.0.3497.100 bsc#1108774
* Fixes from internal audits, fuzzing and other initiatives
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Sep 12 12:52:08 UTC 2018 - astieger@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
* Function signature mismatch in WebAssembly
* URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Sep 8 11:12:43 UTC 2018 - tchvatal@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Enable jumbo build to speed things up
- Enable vulkan integration
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Sep 6 13:27:18 UTC 2018 - tchvatal@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to fix mojo build on 32bit:
* chromium-gcc8-alignof.patch
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Sep 6 09:13:49 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Split out the gn from this package, obsoletes patches:
* fix-gn-bootstrap.patch
* chromium-last-commit-position-r0.patch
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Sep 6 09:09:57 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 69.0.3497.81 bsc#1107235:
* CVE-2018-16065: Out of bounds write in V8
* CVE-2018-16066:Out of bounds read in Blink
* CVE-2018-16067: Out of bounds read in WebAudio
* CVE-2018-16068: Out of bounds write in Mojo
* CVE-2018-16069:Out of bounds read in SwiftShader
* CVE-2018-16070: Integer overflow in Skia
* CVE-2018-16071: Use after free in WebRTC
* CVE-2018-16073: Site Isolation bypass after tab restore
* CVE-2018-16074: Site Isolation bypass using Blob URLS
* Out of bounds read in Little-CMS
* CVE-2018-16075: Local file access in Blink
* CVE-2018-16076: Out of bounds read in PDFium
* CVE-2018-16077: Content security policy bypass in Blink
* CVE-2018-16078: Credit card information leak in Autofill
* CVE-2018-16079: URL spoof in permission dialogs
* CVE-2018-16080: URL spoof in full screen mode
* CVE-2018-16081: Local file access in DevTools
* CVE-2018-16082: Stack buffer overflow in SwiftShader
* CVE-2018-16083: Out of bounds read in WebRTC
* CVE-2018-16084: User confirmation bypass in external protocol handling
* CVE-2018-16085: Use after free in Memory Instrumentation
* CVE-2018-16086: Script injection in New Tab Page.
* CVE-2018-16087: Multiple download restriction bypass.
* CVE-2018-16088: User gesture requirement bypass.
- Added patches:
* chromium-old-glibc.patch
* chromium-system-icu.patch
* chromium-warnings.patch
- Removed patches:
* chromium-cors-string.patch
* chromium-crashpad-aarch64-fix.patch
* chromium-ffmpeg.patch
* chromium-gcc.patch
* chromium-gcc7.patch
* chromium-libjpeg.patch
* chromium-libwebp-shim.patch
- Rebased patches:
* chromium-last-commit-position-r0.patch
* chromium-non-void-return.patch
* chromium-sandbox-pie.patch
* chromium-skia-system-fontconfig.patch
* chromium-vaapi.patch
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Aug 8 21:14:43 UTC 2018 - tchvatal@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to chromium-68.0.3440.106:
* Various feature fixes
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Aug 1 10:12:25 UTC 2018 - tchvatal@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 68.0.3440.84:
* Various small feature fixes only
- Version update to 64.0.3282.140 bsc#1079021: * Various asan fixes bsc#1078463 CVE-2018-6406 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1090
2018-02-02 11:22:25 +00:00
Accepting request 571983 from home:dimstar:Factory Make build one dep cheaper; no need for procps OBS-URL: https://build.opensuse.org/request/show/571983 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1089
2018-02-02 11:10:25 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jul 25 15:56:24 UTC 2018 - guillaume.gardet@opensuse.org
Accepting request 571983 from home:dimstar:Factory Make build one dep cheaper; no need for procps OBS-URL: https://build.opensuse.org/request/show/571983 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1089
2018-02-02 11:10:25 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to fix aarch64 build:
* chromium-vpx-aarch64.patch
-------------------------------------------------------------------
Wed Jul 25 14:29:16 UTC 2018 - tchvatal@suse.com
- Add patch trying to build chromium on Leap 42.3:
* chromium-gcc7.patch
-------------------------------------------------------------------
Wed Jul 25 13:08:17 UTC 2018 - tchvatal@suse.com
- Raise libvpx requirement to match what we really need
-------------------------------------------------------------------
Wed Jul 25 09:53:23 UTC 2018 - tchvatal@suse.com
- Version update to 68.0.3440.75 bsc#1102530:
* CVE-2018-6153: Stack buffer overflow in Skia.
* CVE-2018-6154: Heap buffer overflow in WebGL.
* CVE-2018-6155: Use after free in WebRTC.
* CVE-2018-6156: Heap buffer overflow in WebRTC.
* CVE-2018-6157: Type confusion in WebRTC.
* CVE-2018-6158: Use after free in Blink.
* CVE-2018-6159: Same origin policy bypass in ServiceWorker.
* CVE-2018-6160: URL spoof in Chrome on iOS.
* CVE-2018-6161: Same origin policy bypass in WebAudio.
* CVE-2018-6162: Heap buffer overflow in WebGL.
* CVE-2018-6163: URL spoof in Omnibox.
* CVE-2018-6164: Same origin policy bypass in ServiceWorker.
* CVE-2018-6165: URL spoof in Omnibox.
* CVE-2018-6166: URL spoof in Omnibox.
* CVE-2018-6167: URL spoof in Omnibox.
* CVE-2018-6168: CORS bypass in Blink.
* CVE-2018-6169: Permissions bypass in extension installation.
* CVE-2018-6170: Type confusion in PDFium.
* CVE-2018-6171: Use after free in WebBluetooth.
* CVE-2018-6172: URL spoof in Omnibox.
* CVE-2018-6173: URL spoof in Omnibox.
* CVE-2018-6174: Integer overflow in SwiftShader.
* CVE-2018-6175: URL spoof in Omnibox.
* CVE-2018-6176: Local user privilege escalation in Extensions.
* CVE-2018-6177: Cross origin information leak in Blink.
* CVE-2018-6178: UI spoof in Extensions.
* CVE-2018-6179: Local file information leak in Extensions.
* CVE-2018-6044: Request privilege escalation in Extensions.
* CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
* chromium-master-prefs-path.patch
* chromium-non-void-return.patch
* chromium-vaapi.patch
- Add patches:
* chromium-cors-string.patch
* chromium-gcc.patch
* chromium-libjpeg.patch
* chromium-libwebp-shim.patch
- Remove patches:
* chromium-gcc8.patch
Accepting request 571983 from home:dimstar:Factory Make build one dep cheaper; no need for procps OBS-URL: https://build.opensuse.org/request/show/571983 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1089
2018-02-02 11:10:25 +00:00
- Fix default page to not point to 404 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1087
2018-01-29 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jul 10 11:40:21 UTC 2018 - tchvatal@suse.com
- Fix default page to not point to 404 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1087
2018-01-29 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 67.0.3396.99:
* Various small feature fixes, no security
- Fix default page to not point to 404 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1087
2018-01-29 13:08:00 +00:00
- Install swiftshader objects too as they are needed OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1085
2018-01-29 12:48:04 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 15 19:51:32 UTC 2018 - tchvatal@suse.com
- Install swiftshader objects too as they are needed OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1085
2018-01-29 12:48:04 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to build under gcc8:
* chromium-gcc8.patch
- Install swiftshader objects too as they are needed OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1085
2018-01-29 12:48:04 +00:00
- Disable ozone stuff conditions for now as the headless mode breaks up runtime OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1082
2018-01-26 13:52:01 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jun 13 09:26:43 UTC 2018 - security@suse.com
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 67.0.3396.87:
* CVE-2018-6149: Out of bounds write in V8 (boo#1097452)
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Jun 7 12:23:26 UTC 2018 - astieger@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 67.0.3396.79:
* CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 1 17:45:46 UTC 2018 - tchvatal@suse.com
- Change BuildRequires: nodejs6 -> nodejs8 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1067
2017-11-22 11:07:02 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Require ffmpeg >= 4.0 bsc#1095545
- Change BuildRequires: nodejs6 -> nodejs8 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1067
2017-11-22 11:07:02 +00:00
Accepting request 554955 from network:chromium - Bump to 63.0.3239.84 - Up to 63.0.3239.70 - Up to 63.0.3239.52 - Add patch to make gcc parsing happy: * chromium-non-void-return.patch - Add patch to build with gcc: * chromium-gcc.patch - Fix the tarball unpacking to unroll all the required content - Update to 63.0.3239.30 - Drop patch chromium-60.0.3112.113-breakpad-ucontext.patch - Drop patch chromium-sysroot.patch - Bump to 63.0.3236.0 - Bump to 63.0.3230.0 - Update to 63.0.3223.8 - Rebase fix-gn-boostrap.diff - Remove chromium-gcc5.patch - Bump to 63.0.3218.0 - Rebase fix-gn-bootstrap.diff - Add chromium-sysroot.patch - Version update to 62.0.3202.18 - Update to latest - Switch to system libxml again - Add more folders to be kept in archive - Build with gcc6 on leap as we now require --stdc-14 OBS-URL: https://build.opensuse.org/request/show/554955 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1070
2017-12-07 09:41:26 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed May 30 11:18:13 UTC 2018 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 67.0.3396.62 bsc#1095163
* CVE-2018-6123: Use after free in Blink.
* CVE-2018-6124: Type confusion in Blink.
* CVE-2018-6125: Overly permissive policy in WebUSB.
* CVE-2018-6126: Heap buffer overflow in Skia.
* CVE-2018-6127: Use after free in indexedDB.
* CVE-2018-6128: uXSS in Chrome on iOS.
* CVE-2018-6129: Out of bounds memory access in WebRTC.
* CVE-2018-6130: Out of bounds memory access in WebRTC.
* CVE-2018-6131: Incorrect mutability protection in WebAssembly.
* CVE-2018-6132: Use of uninitialized memory in WebRTC.
* CVE-2018-6133: URL spoof in Omnibox.
* CVE-2018-6134: Referrer Policy bypass in Blink.
* CVE-2018-6135: UI spoofing in Blink.
* CVE-2018-6136: Out of bounds memory access in V8.
* CVE-2018-6137: Leak of visited status of page in Blink.
* CVE-2018-6138: Overly permissive policy in Extensions.
* CVE-2018-6139: Restrictions bypass in the debugger extension API.
* CVE-2018-6140: Restrictions bypass in the debugger extension API.
* CVE-2018-6141: Heap buffer overflow in Skia.
* CVE-2018-6142: Out of bounds memory access in V8.
* CVE-2018-6143: Out of bounds memory access in V8.
* CVE-2018-6144: Out of bounds memory access in PDFium.
* CVE-2018-6145: Incorrect escaping of MathML in Blink.
* CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
* chromium-crashpad-aarch64-fix.patch
* chromium-skia-aarch64-buildfix.patch
* chromium-65.0.3325.162-skia-aarch64-buildfix.patch
* chromium-skia-neon.patch
- Remove no longer needed gcc patch:
* chromium-gcc7.patch
- Rebase patches:
* chromium-non-void-return.patch
* chromium-vaapi.patch
* exclude_ymp.patch
* fix_building_widevinecdm_with_chromium.patch
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat May 26 23:01:20 UTC 2018 - astieger@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
libwebpmux1 (bsc#1070421)
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat May 26 07:08:04 UTC 2018 - astieger@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Fix installation issue on SUSE PackageHub 12 with libminizip1
(bsc#1093031)
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed May 16 07:05:32 UTC 2018 - astieger@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 66.0.3359.181:
* Autoplay: Force enable on desktop for Web Audio
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri May 11 12:10:44 UTC 2018 - astieger@suse.com
Accepting request 542077 from home:AndreasStieger:branches:network:chromium 62.0.3202.94 fix rebuilds in same chroot OBS-URL: https://build.opensuse.org/request/show/542077 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1065
2017-11-15 16:18:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 66.0.3359.170 (bsc#1092923):
* Chain leading to sandbox escape:
CVE-2018-6121: Privilege Escalation in extensions
CVE-2018-6122: Type confusion in V8
* CVE-2018-6120: Heap buffer overflow in PDFium
* Various fixes from internal audits, fuzzing and other
initiatives
Accepting request 542077 from home:AndreasStieger:branches:network:chromium 62.0.3202.94 fix rebuilds in same chroot OBS-URL: https://build.opensuse.org/request/show/542077 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1065
2017-11-15 16:18:16 +00:00
- Version update to 62.0.3202.89 bsc#1066851: * CVE-2017-15398: Stack buffer overflow in QUIC * CVE-2017-15399: Use after free in V8 * CVE-2017-5126: Use after free in PDFium. * CVE-2017-5127: Use after free in PDFium. OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1062
2017-11-07 10:15:26 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed May 9 08:36:30 UTC 2018 - tchvatal@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch chromium-skia-system-fontconfig.patch to fix
bsc#1092272
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri May 4 06:53:49 UTC 2018 - guillaume.gardet@opensuse.org
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Enable build on AArch64
- Fix build on AArch64:
* set target_cpu to arm64
* disable tcmalloc and swiftshader for aarch64
* Add new patches:
- chromium-65.0.3325.162-skia-aarch64-buildfix.patch
- chromium-skia-neon.patch
-------------------------------------------------------------------
Fri Apr 27 08:22:18 UTC 2018 - tchvatal@suse.com
- chromium 66.0.3359.139:
* CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
* drop add-missing-blink-tools.patch, now in tarball again
-------------------------------------------------------------------
Wed Apr 18 09:14:21 UTC 2018 - tchvatal@suse.com
- Version bump to chromium 66.0.3359.117 bsc#1090000:
* CVE-2018-6085: Use after free in Disk Cache
* CVE-2018-6086: Use after free in Disk Cache
* CVE-2018-6087: Use after free in WebAssembly
* CVE-2018-6088: Use after free in PDFium
* CVE-2018-6089: Same origin policy bypass in Service Worker
* CVE-2018-6090: Heap buffer overflow in Skia
* CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
* CVE-2018-6092: Integer overflow in WebAssembly
* CVE-2018-6093: Same origin bypass in Service Worker
* CVE-2018-6094: Exploit hardening regression in Oilpan
* CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
* CVE-2018-6096: Fullscreen UI spoof
* CVE-2018-6097: Fullscreen UI spoof
* CVE-2018-6098: URL spoof in Omnibox
* CVE-2018-6099: CORS bypass in ServiceWorker
* CVE-2018-6100: URL spoof in Omnibox
* CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
* CVE-2018-6102: URL spoof in Omnibox
* CVE-2018-6103: UI spoof in Permissions
* CVE-2018-6104: URL spoof in Omnibox
* CVE-2018-6105: URL spoof in Omnibox
* CVE-2018-6106: Incorrect handling of promises in V8
* CVE-2018-6107: URL spoof in Omnibox
* CVE-2018-6108: URL spoof in Omnibox
* CVE-2018-6109: Incorrect handling of files by FileAPI
* CVE-2018-6110: Incorrect handling of plaintext files via file://
* CVE-2018-6111: Heap-use-after-free in DevTools
* CVE-2018-6112: Incorrect URL handling in DevTools
* CVE-2018-6113: URL spoof in Navigation
* CVE-2018-6114: CSP bypass
* CVE-2018-6115: SmartScreen bypass in downloads
* CVE-2018-6116: Incorrect low memory handling in WebAssembly
* CVE-2018-6117: Confusing autofill settings
* Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
* chromium-compiler.patch
* chromium-glibc-2.27.patch
* chromium-vaapi-init.patch
* exclude_ymp.diff
* fix-gn-bootstrap.diff
* fix_network_api_crash.patch
* mojo.patch
- Add new patches:
* chromium-ffmpeg.patch
* chromium-gcc7.patch
* exclude_ymp.patch
* fix-gn-bootstrap.patch
- Rebase patches:
* chromium-master-prefs-path.patch
* chromium-non-void-return.patch
* chromium-sandbox-pie.patch
* chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
* add-missing-blink-tools.patch
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sun Apr 8 10:49:06 UTC 2018 - tchvatal@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add vaapi patches:
* chromium-vaapi-init.patch
* chromium-vaapi.patch
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Apr 6 12:54:24 UTC 2018 - tchvatal@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Use memory-constraints package to limit threads as needed
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Mar 21 06:31:27 UTC 2018 - astieger@suse.com
Accepting request 642560 from network:chromium - System harfbuzz disable as we need git variant :( - Up 70.0.3538.45 - Up 70.0.3538.35 - Bump the nodejs dependency to 10/8 - Up to 70.0.3538.22 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Up to chromium-67.0.3396.18 - Up to 67.0.3393.4 - Refresh patch exclude_ymp.patch OBS-URL: https://build.opensuse.org/request/show/642560 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1178
2018-10-17 08:03:27 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to Chromium 65.0.3325.181:
* Various security relevant fixes from internal audits, fuzzing
and other initiatives (boo#1086124)
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Mar 20 12:33:53 UTC 2018 - tchvatal@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Use both freetype and harfbuzz either bundled or system
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Mar 14 14:18:35 UTC 2018 - tchvatal@suse.com
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 65.0.3325.162:
* Various stability fixes only
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Mar 14 09:00:37 UTC 2018 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Bundle the harfbuzz on < 15.0 release as we would have to
use requires_ge for the library itself later on otherwise
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Mar 9 09:10:01 UTC 2018 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
variant of libdrm
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Mar 8 09:00:54 UTC 2018 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 65.0.3325.146 bsc#1084296:
* High CVE-2017-11215: Use after free in Flash.
* High CVE-2017-11225: Use after free in Flash.
* High CVE-2018-6060: Use after free in Blink.
* High CVE-2018-6061: Race condition in V8.
* High CVE-2018-6062: Heap buffer overflow in Skia.
* High CVE-2018-6057: Incorrect permissions on shared memory.
* High CVE-2018-6063: Incorrect permissions on shared memory.
* High CVE-2018-6064: Type confusion in V8.
* High CVE-2018-6065: Integer overflow in V8.
* Medium CVE-2018-6066: Same Origin Bypass via canvas.
* Medium CVE-2018-6067: Buffer overflow in Skia.
* Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
* Medium CVE-2018-6069: Stack buffer overflow in Skia.
* Medium CVE-2018-6070: CSP bypass through extensions.
* Medium CVE-2018-6071: Heap bufffer overflow in Skia.
* Medium CVE-2018-6072: Integer overflow in PDFium.
* Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
* Medium CVE-2018-6074: Mark-of-the-Web bypass.
* Medium CVE-2018-6075: Overly permissive cross origin downloads.
* Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
* Medium CVE-2018-6077: Timing attack using SVG filters.
* Medium CVE-2018-6078: URL Spoof in OmniBox.
* Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
* Medium CVE-2018-6080: Information disclosure in IPC call.
* Low CVE-2018-6081: XSS in interstitials.
* Low CVE-2018-6082: Circumvention of port blocking.
* Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
* chromium-compiler.patch
* chromium-glibc-2.27.patch
* mojo.patch
- Drop patches:
* chromium-angle.patch
* chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
fixes
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Feb 24 19:02:51 UTC 2018 - astieger@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 64.0.3282.186:
* Various minor bug fixes
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Feb 14 08:16:34 UTC 2018 - astieger@suse.com
Accepting request 684653 from network:chromium - Add patch to fix crashpad build on aarch64: * chromium-fix_crashpad.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 OBS-URL: https://build.opensuse.org/request/show/684653 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1231
2019-03-13 10:16:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- update to 64.0.3282.167 (bsc#1080920):
* CVE-2018-6056: Incorrect derived class instantiation in V8
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Feb 2 11:16:23 UTC 2018 - tchvatal@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 64.0.3282.140 bsc#1079021:
* Various asan fixes bsc#1078463 CVE-2018-6406
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Feb 2 10:43:48 UTC 2018 - dimstar@opensuse.org
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Eliminate build dependency on procps: we only used it to run
'free', in order to find out how much RAM we have available. We
can get this information directly from the kernel, from
/proc/meminfo.
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Jan 29 13:07:38 UTC 2018 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Fix default page to not point to 404
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Jan 29 12:36:31 UTC 2018 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Install swiftshader objects too as they are needed
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jan 26 10:11:22 UTC 2018 - tchvatal@suse.com
- Disable ozone stuff conditions for now as the headless mode
breaks up runtime bsc#1077722
-------------------------------------------------------------------
Thu Jan 25 09:51:59 UTC 2018 - tchvatal@suse.com
- Switch to gcc7 on Leap builds
-------------------------------------------------------------------
Thu Jan 25 09:42:51 UTC 2018 - tchvatal@suse.com
- Version update to 64.0.3282.119 bsc#1077571:
* High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
* High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
* High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
* Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
* Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
* Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
* Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
* Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
* Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
* Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
* Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
* Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
* Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
* Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
* Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
* Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
* Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
* Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
* Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
* Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
* Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
* Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
* Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
* Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
* chromium-angle.patch
* chromium-memcpy.patch
- Drop patch:
* chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop
-------------------------------------------------------------------
Thu Jan 4 20:59:31 UTC 2018 - astieger@suse.com
- Chromium 63.0.3239.132:
* DevTools: do not report raw headers and cookies for protected
subresources
* Various other fixes and updates
-------------------------------------------------------------------
Fri Dec 15 09:28:07 UTC 2017 - tchvatal@suse.com
- Version update to 63.0.3239.108 bsc#1072976:
* CVE-2017-15429: UXSS in V8
* Various fuzzing fixes
-------------------------------------------------------------------
Thu Dec 7 09:41:13 UTC 2017 - tchvatal@suse.com
- Version update to 63.0.3239.84 bsc#1071691:
* bsc#1106341 CVE-2017-15430 Unsafe navigation in Chromecast
* Critical CVE-2017-15407: Out of bounds write in QUIC.
* High CVE-2017-15408: Heap buffer overflow in PDFium.
* High CVE-2017-15409: Out of bounds write in Skia.
* High CVE-2017-15410: Use after free in PDFium.
* High CVE-2017-15411: Use after free in PDFium.
* High CVE-2017-15412: Use after free in libXML.
* High CVE-2017-15413: Type confusion in WebAssembly.
* Medium CVE-2017-15415: Pointer information disclosure in IPC call.
* Medium CVE-2017-15416: Out of bounds read in Blink.
* Medium CVE-2017-15417: Cross origin information disclosure in Skia.
* Medium CVE-2017-15418: Use of uninitialized value in Skia.
* Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
* Medium CVE-2017-15420: URL spoofing in Omnibox.
* Medium CVE-2017-15422: Integer overflow in ICU.
* Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
* Low CVE-2017-15424: URL Spoof in Omnibox.
* Low CVE-2017-15425: URL Spoof in Omnibox.
* Low CVE-2017-15426: URL Spoof in Omnibox.
* Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
* chromium-gcc5.patch
* chromium-60.0.3112.113-breakpad-ucontext.patch
* chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
* chromium-non-void-return.patch
* chromium-gcc.patch
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 22 11:05:42 UTC 2017 - idonmez@suse.com
Accepting request 699572 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/699572 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1245
2019-04-30 09:13:16 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- BuildRequire nodejs8 instead of nodejs6 for suse_version >= 1330
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 15 14:56:24 UTC 2017 - astieger@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 62.0.3202.94:
* multiple minor rendering related fixes
- fix rebuilds in same chroot
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Nov 7 10:12:28 UTC 2017 - tchvatal@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 62.0.3202.89 bsc#1066851:
* CVE-2017-15398: Stack buffer overflow in QUIC
* CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Nov 3 12:40:33 UTC 2017 - tchvatal@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Restrict the version on jpeg to not waste build power
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sun Oct 29 08:18:37 UTC 2017 - tchvatal@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to fix sandbox crashes wrt bsc#1064298
* chromium-sandbox.patch
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Oct 27 09:17:02 UTC 2017 - tchvatal@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
* CVE-2017-15396: Stack overflow in V8
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Oct 26 12:09:53 UTC 2017 - astieger@suse.com
Accepting request 720533 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/720533 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1284
2019-08-02 08:37:13 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- BuildRequire nodejs6 required for polymer-bundler.js
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Oct 26 09:19:09 UTC 2017 - tchvatal@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Try to export properly CXX/CC variable to fix leap builds
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Oct 25 17:52:44 UTC 2017 - tchvatal@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Apply patch to fix building crc32 with gcc7:
* chromium-62.0.3202.62-correct-cplusplus-check.patch
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Oct 19 03:29:56 UTC 2017 - tchvatal@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 62.0.3202.62 bsc#1064066:
* CVE-2017-5124: UXSS with MHTML.
* CVE-2017-5125: Heap overflow in Skia.
* CVE-2017-5126: Use after free in PDFium.
* CVE-2017-5127: Use after free in PDFium.
* CVE-2017-5128: Heap overflow in WebGL.
* CVE-2017-5129: Use after free in WebAudio.
* CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
* CVE-2017-5130: Heap overflow in libxml2.
* CVE-2017-5131: Out of bounds write in Skia.
* CVE-2017-5133: Out of bounds write in Skia.
* CVE-2017-15386: UI spoofing in Blink.
* CVE-2017-15387: Content security bypass.
* CVE-2017-15388: Out of bounds read in Skia.
* CVE-2017-15389: URL spoofing in OmniBox.
* CVE-2017-15390: URL spoofing in OmniBox.
* CVE-2017-15391: Extension limitation bypass in Extensions.
* CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
* CVE-2017-15393: Referrer leak in Devtools.
* CVE-2017-15394: URL spoofing in extensions UI.
* CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
* arm-webrtc-fix.patch
* arm_use_right_compiler.patch
* chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
* chromium-atk.patch
* chromium-mojo-dep.patch
* gcc60-fixes.diff
- Refresh patches:
* chromium-gcc5.patch
* chromium-prop-codecs.patch
* exclude_ymp.diff
* fix-gn-bootstrap.diff
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Sep 22 14:50:40 UTC 2017 - astieger@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 61.0.3163.100 (boo#1060019):
* CVE-2017-5121: Out-of-bounds access in V8
* CVE-2017-5122: Out-of-bounds access in V8
* Various fixes from internal audits, fuzzing and other initiatives
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Sep 16 15:50:19 UTC 2017 - tchvatal@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 61.0.3163.91:
* Various bugfixes
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Sep 11 08:45:35 UTC 2017 - tchvatal@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 61.0.3163.79 bsc#1057364:
* CVE-2017-5111: Use after free in PDFium.
* CVE-2017-5112: Heap buffer overflow in WebGL.
* CVE-2017-5113: Heap buffer overflow in Skia.
* CVE-2017-5114: Memory lifecycle issue in PDFium.
* CVE-2017-5115: Type confusion in V8.
* CVE-2017-5116: Type confusion in V8.
* CVE-2017-5117: Use of uninitialized value in Skia.
* CVE-2017-5118: Bypass of Content Security Policy in Blink.
* CVE-2017-5119: Use of uninitialized value in Skia.
* CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
* fix-gn-bootstrap.diff
- Remove patches:
* chromium-gcc7.patch
* chromium-override.patch
- Add new patches:
* chromium-atk.patch
* chromium-gcc5.patch
* chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Aug 28 22:57:05 UTC 2017 - astieger@suse.com
Accepting request 730294 from network:chromium - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 OBS-URL: https://build.opensuse.org/request/show/730294 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1308
2019-09-12 07:25:11 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- fix build with Factory glibc:
add chromium-60.0.3112.113-breakpad-ucontext.patch
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Aug 25 09:17:27 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 60.0.3112.113:
* Various bugfixes
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Aug 15 15:17:00 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 60.0.3112.101:
* various usability bugfixes
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Aug 3 13:25:33 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 60.0.3112.90:
* Various usability bugfixes
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Jul 26 13:27:55 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 60.0.3112.78 bsc#1050537:
* CVE-2017-5091: Use after free in IndexedDB
* CVE-2017-5092: Use after free in PPAPI
* CVE-2017-5093: UI spoofing in Blink
* CVE-2017-5094: Type confusion in extensions
* CVE-2017-5095: Out-of-bounds write in PDFium
* CVE-2017-5096: User information leak via Android intents
* CVE-2017-5097: Out-of-bounds read in Skia
* CVE-2017-5098: Use after free in V8
* CVE-2017-5099: Out-of-bounds write in PPAPI
* CVE-2017-5100: Use after free in Chrome Apps
* CVE-2017-5101: URL spoofing in OmniBox
* CVE-2017-5102: Uninitialized use in Skia
* CVE-2017-5103: Uninitialized use in Skia
* CVE-2017-5104: UI spoofing in browser
* CVE-2017-7000: Pointer disclosure in SQLite
* CVE-2017-5105: URL spoofing in OmniBox
* CVE-2017-5106: URL spoofing in OmniBox
* CVE-2017-5107: User information leak via SVG
* CVE-2017-5108: Type confusion in PDFium
* CVE-2017-5109: UI spoofing in browser
* CVE-2017-5110: UI spoofing in payments dialog
* Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1326
2019-10-23 13:10:24 +00:00
* chromium-dma-buf.patch
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
* chromium-gcc7.patch
* chromium-last-commit-position-r0.patch
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1326
2019-10-23 13:10:24 +00:00
* fix-gn-bootstrap.diff
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Jul 24 09:01:07 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Recommend emoji fonts to make sure major web chats do not show
questionmarks
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
------------------------------------------------------------------
Wed Jun 28 19:27:55 UTC 2017 - tchvatal@suse.com
- Update to 59.0.3071.86 bsc#1042833: * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16 * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26 * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07 * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28 * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09 * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05 * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16 * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06 * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28 * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12 * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20 * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05 * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07 * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11 * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24 * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15 - Add patch to fix build with system dma: * chromium-dma-buf.patch - Drop no longer needed patches: * chromium-linker-memory.patch * chromium-system-jinja-r13.patch - Refresh patches: * chromium-gcc7.patch * chromium-system-ffmpeg-r3.patch * fix-gn-bootstrap.diff - Use bundled libxml * Upstream unfortunately uses git snapshot that is not api/abi compatible - Add patch for fpermissive build error: - Version update to 58.0.3029.110: OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1021
2017-06-06 07:56:54 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 59.0.3071.115:
* Various small fixes all around
Accepting request 655505 from network:chromium - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Update chromium-non-void-return.patch and use __builtin_abort for switch cases of out of enum ranges. - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 - Up to 68.0.3432.3 - Fix AArch64 build with chromium-crashpad-aarch64-fix.patch - Up to 68.0.3423.2 - Refresh patch chromium-master-prefs-path.patch - Fix AArch64 build with chromium-skia-aarch64-buildfix.patch - Add patch chromium-skia-system-fontconfig.patch bsc#1092272 - Up to 67.0.3393.30 - Enable build on AArch64 OBS-URL: https://build.opensuse.org/request/show/655505 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1200
2018-12-06 08:33:56 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 23 07:46:48 UTC 2017 - astieger@suse.com
Accepting request 633585 from network:chromium ok OBS-URL: https://build.opensuse.org/request/show/633585 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1159
2018-09-06 09:07:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 59.0.3071.109:
* ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
* Fixing mouse focus on WebView
* Remove gtk dependency from gles tests
* Set build flag when using own FreeType
* Revert of [scheduler] Move some task types to suspendable task runner
* Fix an incorrect method name on the chrome://site-engagement WebUI page
* Linux/Windows: Removing Guest menu item for supervised profile
Accepting request 633585 from network:chromium ok OBS-URL: https://build.opensuse.org/request/show/633585 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1159
2018-09-06 09:07:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Jun 16 12:12:56 UTC 2017 - astieger@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to 59.0.3071.104 (bsc#1044690):
* CVE-2017-5087: Sandbox Escape in IndexedDB
* CVE-2017-5088: Out of bounds read in V8
* CVE-2017-5089: Domain spoofing in Omnibox
* Various fixes from internal audits, fuzzing and other initiatives
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Jun 8 14:56:42 UTC 2017 - tchvatal@suse.com
Accepting request 742142 from network:chromium - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 OBS-URL: https://build.opensuse.org/request/show/742142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1325
2019-10-23 13:00:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch chromium-buildname.patch bsc#1043420
- Version update to 58.0.3029.96: * Fixes bsc#1037594 CVE-2017-5068 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1013
2017-05-04 12:43:08 +00:00
- Use bundled jinja2, system one changed in 2.9 too much to work * It is at least used only during build OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1011
2017-04-25 13:25:29 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jun 6 07:53:53 UTC 2017 - tchvatal@suse.com
- Update to 59.0.3071.86 bsc#1042833:
* CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
* CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
* CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
* CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
* CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
* CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
* CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
* CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
* CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
* CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
* CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
* CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
* CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
* CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
* CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
* CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
* chromium-dma-buf.patch
- Drop no longer needed patches:
* chromium-linker-memory.patch
* chromium-system-jinja-r13.patch
- Refresh patches:
* chromium-gcc7.patch
* chromium-system-ffmpeg-r3.patch
* fix-gn-bootstrap.diff
- Use bundled libxml
* Upstream unfortunately uses git snapshot that is not api/abi compatible
- Use bundled jinja2, system one changed in 2.9 too much to work * It is at least used only during build OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1011
2017-04-25 13:25:29 +00:00
- Version update to 57.0.2987.133 bsc#1031677: * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin * High CVE-2017-5056: Use after free in Blink. Credit to anonymous * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587) OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1007
2017-03-30 13:13:13 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Jun 5 12:55:22 UTC 2017 - tchvatal@suse.com
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to build with gcc7:
* chromium-gcc7.patch
- Add patch for fpermissive build error:
* chromium-fpermissive.patch
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed May 10 07:43:46 UTC 2017 - tchvatal@suse.com
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 58.0.3029.110:
* Various small bugfixes
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu May 4 12:40:32 UTC 2017 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 58.0.3029.96:
* Fixes bsc#1037594 CVE-2017-5068
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Apr 25 13:24:42 UTC 2017 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Use bundled jinja2, system one changed in 2.9 too much to work
* It is at least used only during build
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Apr 21 09:57:49 UTC 2017 - tchvatal@suse.com
- Version update to 58.0.3029.81 bsc#1035103:
* High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
* High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
* High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
* Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
* Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
* Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
* Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
* Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
* Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
* Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
* Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
* Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Version update to 58.0.3029.81 bsc#1035103: * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360 * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah) * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman - Refresh patch fix-gn-bootstrap.diff - Refresh patch chromium-system-jinja-r13.patch - Remove obsolete patch chromium-57-gcc4.patch - Version update to 57.0.2987.133 bsc#1031677: * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin * High CVE-2017-5056: Use after free in Blink. Credit to anonymous * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587) - Add patch to build with gcc4 * chromium-57-gcc4.patch - Do not use gcc5 and newer as the compat was fixed again - Update to 57.0.2987.110 with various other small tweaks - Version update to 57.0.2987.98 bsc#1028848: OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1010
2017-04-21 10:00:24 +00:00
- Refresh patch fix-gn-bootstrap.diff
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch
Accepting request 489762 from network:chromium - Update to 58.0.3029.81 - Update to 58.0.3029.68 - Tie harfbuzz condition together with the minizip one - Version update to 58.0.3029.54 - Update to 58.0.3029.33 - Update to 58.0.3029.19 - Reduce the requirement on gcc to be 4.8 only again - Version update to 58.0.3029.14 - Disable system vpx for now, needs symbols that will be in 1.6.2 - Update fix-gn-bootstrap.diff to build again - Version update to 58.0.3029.6 - Update to 58.0.3026.3 - Empty fix-gn-bootstrap.diff again as it was merged upstream - Drop patch chromium-enable-vaapi-on-suse.patch as it breaks on radeon and nvidia cards - Update to 58.0.3018.3 - Update patch fix-gn-bootstrap.diff to match what is needed now - Refresh patch chromium-system-jinja-r13.patch - Version update to 58.0.3013.3 - Update to 58.0.3004.3 OBS-URL: https://build.opensuse.org/request/show/489762 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1009
2017-04-21 09:15:51 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Mar 30 13:07:50 UTC 2017 - tchvatal@suse.com
Accepting request 489762 from network:chromium - Update to 58.0.3029.81 - Update to 58.0.3029.68 - Tie harfbuzz condition together with the minizip one - Version update to 58.0.3029.54 - Update to 58.0.3029.33 - Update to 58.0.3029.19 - Reduce the requirement on gcc to be 4.8 only again - Version update to 58.0.3029.14 - Disable system vpx for now, needs symbols that will be in 1.6.2 - Update fix-gn-bootstrap.diff to build again - Version update to 58.0.3029.6 - Update to 58.0.3026.3 - Empty fix-gn-bootstrap.diff again as it was merged upstream - Drop patch chromium-enable-vaapi-on-suse.patch as it breaks on radeon and nvidia cards - Update to 58.0.3018.3 - Update patch fix-gn-bootstrap.diff to match what is needed now - Refresh patch chromium-system-jinja-r13.patch - Version update to 58.0.3013.3 - Update to 58.0.3004.3 OBS-URL: https://build.opensuse.org/request/show/489762 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1009
2017-04-21 09:15:51 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 57.0.2987.133 bsc#1031677:
* Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
* High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
* High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
* High CVE-2017-5056: Use after free in Blink. Credit to anonymous
* High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)
- Version update to 57.0.2987.133 bsc#1031677: * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin * High CVE-2017-5056: Use after free in Blink. Credit to anonymous * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587) OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1007
2017-03-30 13:13:13 +00:00
- Drop the browser(npapi) provide which is not true OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1006
2017-03-24 15:24:27 +00:00
-------------------------------------------------------------------
Fri Mar 24 15:22:38 UTC 2017 - tchvatal@suse.com
- Drop the browser(npapi) provide which is not true
- Add patch to build with gcc4 * chromium-57-gcc4.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1004
2017-03-19 11:05:38 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sun Mar 19 11:04:47 UTC 2017 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add patch to build with gcc4
* chromium-57-gcc4.patch
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Mar 16 20:45:00 UTC 2017 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Mar 10 10:55:23 UTC 2017 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 57.0.2987.98 bsc#1028848:
CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
* fix-gn-bootstrap.diff
* chromium-linker-memory.patch
- Remove obsolete patches:
* chromium-sandbox.patch
* chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
* chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Feb 15 12:02:32 UTC 2017 - idonmez@suse.com
- Also add harfbuzz-ng to keeplibs for SLE OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=993
2017-02-15 12:12:32 +00:00
- Also add harfbuzz-ng to keeplibs for SLE
- Add condition for system harfbuzz to be disabled on SLE OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=990
2017-02-06 20:33:22 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Feb 6 20:29:52 UTC 2017 - tchvatal@suse.com
- Add condition for system harfbuzz to be disabled on SLE OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=990
2017-02-06 20:33:22 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Add condition for system harfbuzz to be disabled on SLE
- Add condition for system harfbuzz to be disabled on SLE OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=990
2017-02-06 20:33:22 +00:00
Accepting request 454961 from home:nry297o4mn1tyc9qss06:branches:network:chromium Fixed a typo in the system minizip building requirement. OBS-URL: https://build.opensuse.org/request/show/454961 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=989
2017-02-06 12:54:45 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Feb 6 12:21:34 UTC 2017 - qvoheagbfovvhubzdxfx@posteo.net
Accepting request 454961 from home:nry297o4mn1tyc9qss06:branches:network:chromium Fixed a typo in the system minizip building requirement. OBS-URL: https://build.opensuse.org/request/show/454961 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=989
2017-02-06 12:54:45 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Fixed a typo in the build requirements for system minizip.
Accepting request 454961 from home:nry297o4mn1tyc9qss06:branches:network:chromium Fixed a typo in the system minizip building requirement. OBS-URL: https://build.opensuse.org/request/show/454961 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=989
2017-02-06 12:54:45 +00:00
- Version update to 56.0.2924.87: * Various small fixes * Disabled option to enable/disable plugins in the chrome://plugins OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=987
2017-02-03 12:38:03 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Feb 3 12:23:34 UTC 2017 - tchvatal@suse.com
Accepting request 478466 from network:chromium - Version update to 57.0.2987.98 - Remove vaapi patch that broke amd and nvidia cards - Remove ffmpeg2 patch that is obsolete * chromium-54-ffmpeg2compat.patch * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.88 - Update to 57.0.2987.74 - Update to 57.0.2987.54 - Version update to 57.0.2987.37 - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. - Added patch chromium-enable-vaapi-on-suse.patch to enable VAAPI hardware accelerated video decoding. * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.21 - Update to 57.0.2987.19 - Version update to 57.0.2987.13 - Update to 57.0.2987.8 - Update to 57.0.2986.0 - Version update to 57.0.2984.0 - Drop the support code for builtin ffmpeg and rely on the system one always OBS-URL: https://build.opensuse.org/request/show/478466 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=999
2017-03-10 10:52:51 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 56.0.2924.87:
* Various small fixes
* Disabled option to enable/disable plugins in the chrome://plugins
Accepting request 478466 from network:chromium - Version update to 57.0.2987.98 - Remove vaapi patch that broke amd and nvidia cards - Remove ffmpeg2 patch that is obsolete * chromium-54-ffmpeg2compat.patch * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.88 - Update to 57.0.2987.74 - Update to 57.0.2987.54 - Version update to 57.0.2987.37 - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. - Added patch chromium-enable-vaapi-on-suse.patch to enable VAAPI hardware accelerated video decoding. * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.21 - Update to 57.0.2987.19 - Version update to 57.0.2987.13 - Update to 57.0.2987.8 - Update to 57.0.2986.0 - Version update to 57.0.2984.0 - Drop the support code for builtin ffmpeg and rely on the system one always OBS-URL: https://build.opensuse.org/request/show/478466 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=999
2017-03-10 10:52:51 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Feb 2 20:01:27 UTC 2017 - qvoheagbfovvhubzdxfx@posteo.net
Accepting request 478466 from network:chromium - Version update to 57.0.2987.98 - Remove vaapi patch that broke amd and nvidia cards - Remove ffmpeg2 patch that is obsolete * chromium-54-ffmpeg2compat.patch * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.88 - Update to 57.0.2987.74 - Update to 57.0.2987.54 - Version update to 57.0.2987.37 - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. - Added patch chromium-enable-vaapi-on-suse.patch to enable VAAPI hardware accelerated video decoding. * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.21 - Update to 57.0.2987.19 - Version update to 57.0.2987.13 - Update to 57.0.2987.8 - Update to 57.0.2986.0 - Version update to 57.0.2984.0 - Drop the support code for builtin ffmpeg and rely on the system one always OBS-URL: https://build.opensuse.org/request/show/478466 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=999
2017-03-10 10:52:51 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Added the package 'chromium-privacy' with multiple patches
sourced from the release version on https://github.com/
u4qo60z73t1c4hurv3ny/privacy_patches-oS_cr, which, when enabled
with the build option 'privacy', builds a version of Chromium
with less privacy implications due to Google services
integration.
Accepting request 478466 from network:chromium - Version update to 57.0.2987.98 - Remove vaapi patch that broke amd and nvidia cards - Remove ffmpeg2 patch that is obsolete * chromium-54-ffmpeg2compat.patch * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.88 - Update to 57.0.2987.74 - Update to 57.0.2987.54 - Version update to 57.0.2987.37 - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. - Added patch chromium-enable-vaapi-on-suse.patch to enable VAAPI hardware accelerated video decoding. * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.21 - Update to 57.0.2987.19 - Version update to 57.0.2987.13 - Update to 57.0.2987.8 - Update to 57.0.2986.0 - Version update to 57.0.2984.0 - Drop the support code for builtin ffmpeg and rely on the system one always OBS-URL: https://build.opensuse.org/request/show/478466 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=999
2017-03-10 10:52:51 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Feb 1 09:48:35 UTC 2017 - qvoheagbfovvhubzdxfx@posteo.net
Accepting request 478466 from network:chromium - Version update to 57.0.2987.98 - Remove vaapi patch that broke amd and nvidia cards - Remove ffmpeg2 patch that is obsolete * chromium-54-ffmpeg2compat.patch * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.88 - Update to 57.0.2987.74 - Update to 57.0.2987.54 - Version update to 57.0.2987.37 - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. - Added patch chromium-enable-vaapi-on-suse.patch to enable VAAPI hardware accelerated video decoding. * chromium-enable-vaapi-on-suse.patch - Update to 57.0.2987.21 - Update to 57.0.2987.19 - Version update to 57.0.2987.13 - Update to 57.0.2987.8 - Update to 57.0.2986.0 - Version update to 57.0.2984.0 - Drop the support code for builtin ffmpeg and rely on the system one always OBS-URL: https://build.opensuse.org/request/show/478466 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=999
2017-03-10 10:52:51 +00:00
- Version update to 57.0.2987.98 bsc#1028848: CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034 CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040 CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043 CVE-2017-5044 CVE-2017-5045 CVE-2017-5046 - Refresh patches * fix-gn-bootstrap.diff * chromium-linker-memory.patch - Remove obsolete patches: * chromium-sandbox.patch - Remove vaapi patch which broke rendering on non-intel cards: - Fixed a typo in the build requirements for system minizip. - Version update to 56.0.2924.87: * Various small fixes * Disabled option to enable/disable plugins in the chrome://plugins - Added the package 'chromium-privacy' with multiple patches sourced from the release version on https://github.com/ u4qo60z73t1c4hurv3ny/privacy_patches-oS_cr, which, when enabled with the build option 'privacy', builds a version of Chromium with less privacy implications due to Google services integration. - Version update to 56.0.2924.76 bsc#1022049: - CVE-2017-5007: Universal XSS in Blink - CVE-2017-5006: Universal XSS in Blink - CVE-2017-5008: Universal XSS in Blink OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1000
2017-03-10 10:59:30 +00:00
- Changed the build requirement of libavformat to library version
57.41.100, as included in ffmpeg 3.1.1, as only this version
properly supports the public AVStream API 'codecpar'.
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Jan 31 14:08:26 UTC 2017 - tchvatal@suse.com
- Version update to 56.0.2924.76 bsc#1022049:
- CVE-2017-5007: Universal XSS in Blink
- CVE-2017-5006: Universal XSS in Blink
- CVE-2017-5008: Universal XSS in Blink
- CVE-2017-5010: Universal XSS in Blink
- CVE-2017-5011: Unauthorised file access in Devtools
- CVE-2017-5009: Out of bounds memory access in WebRTC
- CVE-2017-5012: Heap overflow in V8
- CVE-2017-5013: Address spoofing in Omnibox
- CVE-2017-5014: Heap overflow in Skia
- CVE-2017-5015: Address spoofing in Omnibox
- CVE-2017-5019: Use after free in Renderer
- CVE-2017-5016: UI spoofing in Blink
- CVE-2017-5017: Uninitialised memory access in webm video
- CVE-2017-5018: Universal XSS in chrome://apps
- CVE-2017-5020: Universal XSS in chrome://downloads
- CVE-2017-5021: Use after free in Extensions
- CVE-2017-5022: Bypass of Content Security Policy in Blink
- CVE-2017-5023: Type confusion in metrics
- CVE-2017-5024: Heap overflow in FFmpeg
- CVE-2017-5025: Heap overflow in FFmpeg
- CVE-2017-5026: UI spoofing. Credit to Ronni Skansing
- Add conditional to switch between system and bundled icu
- Raise dependency on harfbuzz to 1.3.1
- Also refresh patches:
chromium-prop-codecs.patch chromium-linker-memory.patch
-------------------------------------------------------------------
Sat Jan 28 11:31:18 UTC 2017 - qvoheagbfovvhubzdxfx@posteo.net
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Added patch chromium-enable-vaapi-on-suse.patch to enable
VAAPI hardware accelerated video decoding.
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Dec 21 20:19:42 UTC 2016 - astieger@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 55.0.2883.87:
* various fixes for crashes and specific wesites
* update Google pinned certificates
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Dec 21 10:02:52 UTC 2016 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Disable system icu on Factory, crashes autofill
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Tue Dec 13 14:38:08 UTC 2016 - idonmez@suse.com
- python-html5lib now depends on six, so preserve that too for SLE builds. OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=974
2016-12-13 15:17:44 +00:00
- python-html5lib now depends on six, so preserve that too for SLE
builds.
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Fri Dec 9 12:07:10 UTC 2016 - astieger@suse.com
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Obsolete ffmpeg and ffmpegsumo package in addition to conflict
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Dec 5 17:08:45 UTC 2016 - astieger@suse.com
Accepting request 755755 from network:chromium - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: OBS-URL: https://build.opensuse.org/request/show/755755 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1349
2019-12-11 09:26:30 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- record minimum version for harfbuzz, incuding runtime
Chromium will crash with harfbuzz < 1.3.0
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Dec 3 09:59:21 UTC 2016 - tchvatal@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 55.0.2883.75 bnc#1013236:
CVE-2016-9651 CVE-2016-5208 CVE-2016-5207 CVE-2016-5206 CVE-2016-5205
CVE-2016-5204 CVE-2016-5209 CVE-2016-5203 CVE-2016-5210 CVE-2016-5212
CVE-2016-5211 CVE-2016-5213 CVE-2016-5214 CVE-2016-5216 CVE-2016-5215
CVE-2016-5217 CVE-2016-5218 CVE-2016-5219 CVE-2016-5221 CVE-2016-5220
CVE-2016-5222 CVE-2016-9650 CVE-2016-5223 CVE-2016-5226 CVE-2016-5225
CVE-2016-5224 CVE-2016-9652
- Switch to system libraries: harfbuzz, zlib, ffmpeg, ...
- Refreshed patches:
* chromium-system-ffmpeg-r3.patch
* chromium-system-jinja-r13.patch
- Use system ffmpeg unless on 13.2 that didn't include it
* chromium-54-ffmpeg2compat.patch
* Remove upstreamed chromium-more-codec-aliases.patch
- Remove bookmarks override as discussed with artwork simply just set
homepage to our openSUSE one and that is all
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Nov 12 08:20:05 UTC 2016 - astieger@suse.com
Accepting request 770266 from network:chromium - Disable lto to avoid the overflow >16GB ram used - Use internal resources for icon and appdata - Added patch chromium-vaapi-fix.patch again to fix boo#1146219 ------------------------------------------------------------------- - Up to 78.0.3887.7 - Enable LTO for x86_64 - add gcc-enable-lto.patch and gcc-lto-rsp-clobber.patch patches. - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 OBS-URL: https://build.opensuse.org/request/show/770266 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1363
2020-02-05 13:08:00 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Chromium 54.0.2840.100:
* CVE-2016-5199: Heap corruption in FFmpeg (boo#1009892)
* CVE-2016-5200: out of bounds memory access in v8 (boo#1009893)
* CVE-2016-5201: info leak in extensions (boo#1009894)
* CVE-2016-5202: various fixes from internal audits (boo#1009895)
Accepting request 440008 from home:AndreasStieger:branches:network:chromium - Chromium 54.0.2840.100: * CVE-2016-5199: Heap corruption in FFmpeg (boo#1009892) * CVE-2016-5200: out of bounds memory access in v8 (boo#1009893) * CVE-2016-5201: info leak in extensions (boo#1009894) * CVE-2016-5202: various fixes from internal audits (boo#1009895) OBS-URL: https://build.opensuse.org/request/show/440008 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=960
2016-11-12 11:07:29 +00:00
- Add patch chromium-prop-codecs.patch and set properly the codecs variable in main scope to allow ffmpeg passthrough bnc#1008725 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=959
2016-11-07 20:04:46 +00:00
-------------------------------------------------------------------
Mon Nov 7 20:02:46 UTC 2016 - tchvatal@suse.com
- Add patch chromium-prop-codecs.patch and set properly the codecs
variable in main scope to allow ffmpeg passthrough
bnc#1008725
- Update to 54.0.2840.90: * Few fixes and tweaks OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=955
2016-11-02 07:34:11 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Nov 2 07:32:27 UTC 2016 - tchvatal@suse.com
- Update to 54.0.2840.90:
* Few fixes and tweaks
* Fixes CVE-2016-5198 bsc#1008274
-------------------------------------------------------------------
Fri Oct 21 10:27:16 UTC 2016 - tchvatal@suse.com
- Update to 54.0.2840.71:
* Few fixes around
-------------------------------------------------------------------
Thu Oct 13 10:19:03 UTC 2016 - tchvatal@suse.com
- Version update to 54.0.2840.59 bnc#1004465:
- CVE-2016-5181: Universal XSS in Blink (Anonymous)
- CVE-2016-5182: Heap overflow in Blink (Giwan Go of STEALIEN)
- CVE-2016-5183: Use after free in PDFium (Anonymous)
- CVE-2016-5184: Use after free in PDFium (Anonymous)
- CVE-2016-5185: Use after free in Blink (cloudfuzzer)
- CVE-2016-5187: URL spoofing (Luan Herrera)
- CVE-2016-5188: UI spoofing (Luan Herrera)
- CVE-2016-5192: Cross-origin bypass in Blink (haojunhou at gmail)
- CVE-2016-5189: URL spoofing (xisigr of Tencent's Xuanwu Lab)
- CVE-2016-5186: Out of bounds read in DevTools (Abdulrahman Alqabandi)
- CVE-2016-5191: Universal XSS in Bookmarks (Gareth Hughes)
- CVE-2016-5190: Use after free in Internals (Atte Kettunen of OUSPG)
- CVE-2016-5193: Scheme bypass (Yuyang ZHOUmartinzhou96)
- packaging changes:
* disable build for chromium-beta on %arm.
* Make linker use less memory by tweaking its options:
chromium-linker-memory.patch
* obsolete desktop subpackages
* Switch to gold to reduce memory use use during build
* fix build on 4.5+ kernels with systemlibs:
chromium-sandbox.patch
* various compiler and linker flag adjustments
* enable gtk3 ui, add patch gtk3-missing-define.patch
* switch from some bundled libraries to the system versions
chromium-system-ffmpeg-r3.patch
chromium-system-jinja-r13.patch
fix-gn-bootstrap.diff
* remove service file covered by download_files
- run time bug fixes:
* Add --ui-disable-partial-swap to the launcher bnc#1000019
* Use default chromium values from master_preferences on first run
rather than pseudo-duplicating in shellscript
- added features:
* hangouts extension
-------------------------------------------------------------------
Fri Sep 30 08:00:45 UTC 2016 - tchvatal@suse.com
- Version update to 53.0.2785.143 bnc#1002140:
* CVE-2016-5177: Use after free in V8
* CVE-2016-5178: Various fixes from internal audits
- Version update to 53.0.2785.143 bnc#1002140: * CVE-2016-5177: Use after free in V8 * CVE-2016-5178: Various fixes from internal audits OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=945
2016-09-30 08:09:37 +00:00
Accepting request 430418 from home:dimstar:Factory - Export GDK_BACKEND=x11 before starting chromium, ensuring that it's started as an Xwayland client (boo#1001135). OBS-URL: https://build.opensuse.org/request/show/430418 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=944
2016-09-26 12:33:23 +00:00
-------------------------------------------------------------------
Accepting request 435022 from home:AndreasStieger:branches:network:chromium make changelog expressive relative to openSUSE:Factory/chromium OBS-URL: https://build.opensuse.org/request/show/435022 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=950
2016-10-14 10:06:23 +00:00
Mon Sep 26 12:22:41 UTC 2016 - dimstar@opensuse.org
Accepting request 430418 from home:dimstar:Factory - Export GDK_BACKEND=x11 before starting chromium, ensuring that it's started as an Xwayland client (boo#1001135). OBS-URL: https://build.opensuse.org/request/show/430418 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=944
2016-09-26 12:33:23 +00:00
Accepting request 435022 from home:AndreasStieger:branches:network:chromium make changelog expressive relative to openSUSE:Factory/chromium OBS-URL: https://build.opensuse.org/request/show/435022 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=950
2016-10-14 10:06:23 +00:00
- Export GDK_BACKEND=x11 before starting chromium, ensuring that
it's started as an Xwayland client (boo#1001135).
Accepting request 430418 from home:dimstar:Factory - Export GDK_BACKEND=x11 before starting chromium, ensuring that it's started as an Xwayland client (boo#1001135). OBS-URL: https://build.opensuse.org/request/show/430418 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=944
2016-09-26 12:33:23 +00:00
- Apply sandbox patch to fix crashers on tumbleweed bnc#999091 * chromium-sandbox.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=942
2016-09-17 11:42:07 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Sep 17 11:36:18 UTC 2016 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Apply sandbox patch to fix crashers on tumbleweed bnc#999091
Accepting request 435022 from home:AndreasStieger:branches:network:chromium make changelog expressive relative to openSUSE:Factory/chromium OBS-URL: https://build.opensuse.org/request/show/435022 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=950
2016-10-14 10:06:23 +00:00
* chromium-sandbox.patch
- Apply sandbox patch to fix crashers on tumbleweed bnc#999091 * chromium-sandbox.patch OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=942
2016-09-17 11:42:07 +00:00
- Version update to 53.0.2785.113 bnc#998743: * CVE-2016-5170 Use after free in Blink * CVE-2016-5171 Use after free in Blink * CVE-2016-5172 Arbitrary Memory Read in v8 * CVE-2016-5173 Extension resource access * CVE-2016-5174 Popup not correctly suppressed * CVE-2016-5175 Various fixes from internal audits OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=939
2016-09-14 07:43:39 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Thu Sep 15 13:09:21 UTC 2016 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update stable channel 53.0.2785.116
* Just smal bugfixes around
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Sep 14 07:35:09 UTC 2016 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Version update to 53.0.2785.113 bnc#998743:
* CVE-2016-5170 Use after free in Blink
* CVE-2016-5171 Use after free in Blink
* CVE-2016-5172 Arbitrary Memory Read in v8
* CVE-2016-5173 Extension resource access
* CVE-2016-5174 Popup not correctly suppressed
* CVE-2016-5175 Various fixes from internal audits
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Mon Sep 12 08:31:59 UTC 2016 - tchvatal@suse.com
Accepting request 708453 from network:chromium - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Update %arm build, but keep it disabled for now, as ld requires lots of RAM - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Increase %limit_build value to avoid OOM - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: * chromium-skia-aarch64-buildfix.patch - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 OBS-URL: https://build.opensuse.org/request/show/708453 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1258
2019-06-07 19:47:47 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Reenable widevine build again bnc#998328
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Sat Sep 10 09:13:37 UTC 2016 - tchvatal@suse.com
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Stable channel update to 53.0.2785.101
* SPDY crasher fixes
* Disable NV12 DXGI video on AMD
* Forward --password-store switch to os_crypt
* Tell the kernel to discard USB requests when they time out.
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
-------------------------------------------------------------------
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
Wed Sep 7 14:50:44 UTC 2016 - astieger@suse.com
Accepting request 670066 from network:chromium - Add patch to fix aarch64 build: * chromium-crashpad-fix_aarch64.patch - Refresh patch: * chromium-non-void-return.patch - Add new patch to fix aarch64 build: * chromium-fix_swiftshader.patch - Up to 72.0.3626.14 - Update chromium-vaapi.patch - Update chromium-system-icu.patch - Rework aarch64 build requirements - Reduce jumbo_file_merge_limit to 8 for aarch64 to avoid OOM - Fix again aarch64 skia build: - Up to 71.0.3551.3 - Up to 70.0.3528.4 - Up to chromium-70.0.3521.2 - Add patch trying to build with system icu: * chromium-system-icu.patch - Up to chromium-70.0.3510.0 - Up to 69.0.3497.23 - Up to chromium-69.0.3497.12 - Add patch to fix aarch64 build: * chromium-vpx-aarch64.patch - Up to 69.0.3493.3 - Up to 69.0.3486.0 - Up to 69.0.3472.3 - Up to 69.0.3452.0 - Up to 68.0.3440.17 - Up to 68.0.3438.3 OBS-URL: https://build.opensuse.org/request/show/670066 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1217
2019-01-30 08:50:03 +00:00
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1364
2020-02-05 13:12:40 +00:00
- Update to Chromium 53.0.2785.92:
* Revert of support relocatable RPM packages
* disallow WKBackForwardListItem navigations for pushState pages
* arc: bluetooth: Fix advertised uuid
* fix conflicting PendingIntent for stop button and swipe away
Accepting request 425328 from home:AndreasStieger:branches:network:chromium Chromium 53.0.2785.92 OBS-URL: https://build.opensuse.org/request/show/425328 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=934
2016-09-07 17:33:54 +00:00
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=930
2016-09-01 04:12:52 +00:00
-------------------------------------------------------------------
Thu Sep 1 04:04:13 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 53.0.2785.89
- Improvements to the GN build system (boo#996032, boo#99606, boo#995932)
Accepting request 424143 from home:AndreasStieger:branches:network:chromium typo fix for boo#996648 OBS-URL: https://build.opensuse.org/request/show/424143 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=932
2016-09-01 07:55:21 +00:00
- Security fixes (boo#996648)
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=930
2016-09-01 04:12:52 +00:00
* CVE-2016-5147: Universal XSS in Blink.
* CVE-2016-5148: Universal XSS in Blink.
* CVE-2016-5149: Script injection in extensions.
* CVE-2016-5150: Use after free in Blink.
* CVE-2016-5151: Use after free in PDFium.
* CVE-2016-5152: Heap overflow in PDFium.
* CVE-2016-5153: Use after destruction in Blink.
* CVE-2016-5154: Heap overflow in PDFium.
* CVE-2016-5155: Address bar spoofing.
* CVE-2016-5156: Use after free in event bindings.
* CVE-2016-5157: Heap overflow in PDFium.
* CVE-2016-5158: Heap overflow in PDFium.
* CVE-2016-5159: Heap overflow in PDFium.
* CVE-2016-5161: Type confusion in Blink.
* CVE-2016-5162: Extensions web accessible resources bypass.
* CVE-2016-5163: Address bar spoofing.
* CVE-2016-5164: Universal XSS using DevTools.
* CVE-2016-5165: Script injection in DevTools.
* CVE-2016-5166: SMB Relay Attack via Save Page As.
* CVE-2016-5160: Extensions web accessible resources bypass.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=931
2016-09-01 04:22:45 +00:00
- Drop patches chromium-snapshot-toolchain-r1.patch
Accepting request 424143 from home:AndreasStieger:branches:network:chromium typo fix for boo#996648 OBS-URL: https://build.opensuse.org/request/show/424143 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=932
2016-09-01 07:55:21 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=912
2016-08-27 18:49:35 +00:00
-------------------------------------------------------------------
Sat Aug 27 18:46:44 UTC 2016 - tittiatcoke@gmail.com
- Make it build on ARM.
* Add build patch arm_use_right_compiler.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=923
2016-08-27 19:45:26 +00:00
- Drop unnecessary patches:
* chromium-arm-r0.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=920
2016-08-27 19:22:08 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=897
2016-08-22 10:38:29 +00:00
-------------------------------------------------------------------
Mon Aug 22 10:13:19 UTC 2016 - tittiatcoke@gmail.com
- Change buildsystem to GN, which is the new upstream default
* Make Ninja only use 4 buildprocesses for building Chromium itself
* Drop unnecessary patches
- chromium-gcc-fixes.patch
- adjust-ldflags-no-keep-memory.patch
- gcc50-fixes.diff
* Add patches to ensure correct build
- chromium-last-commit-position-r0.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=908
2016-08-22 13:26:24 +00:00
- chromium-snapshot-toolchain-r1.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=897
2016-08-22 10:38:29 +00:00
* Drop unnecessary sourcefiles
- courgette.tar.xz
- depot_tools.tar.xz
- gn-binaries.tar.xz
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=896
2016-08-12 08:28:05 +00:00
-------------------------------------------------------------------
Fri Aug 12 08:20:57 UTC 2016 - tittiatcoke@gmail.com
- Use an explicit number of ninja build processes (-j 4), to
further reduce the memory used.
Accepting request 417055 from home:AndreasStieger:branches:network:chromium Update to Chromium 52.0.2743.116: * Security fixes (boo#992305): + CVE-2016-5141: Address bar spoofing (boo#992314) + CVE-2016-5142: Use-after-free in Blink (boo#992313) + CVE-2016-5139: Heap overflow in pdfium (boo#992311) + CVE-2016-5140: Heap overflow in pdfium (boo#992310) + CVE-2016-5145: Same origin bypass for images in Blink (boo#992320) + CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319) + CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315) + CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309) OBS-URL: https://build.opensuse.org/request/show/417055 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=894
2016-08-05 16:37:22 +00:00
-------------------------------------------------------------------
Fri Aug 5 08:53:57 UTC 2016 - astieger@suse.com
- Update to Chromium 52.0.2743.116:
* Security fixes (boo#992305):
+ CVE-2016-5141: Address bar spoofing (boo#992314)
+ CVE-2016-5142: Use-after-free in Blink (boo#992313)
+ CVE-2016-5139: Heap overflow in pdfium (boo#992311)
+ CVE-2016-5140: Heap overflow in pdfium (boo#992310)
+ CVE-2016-5145: Same origin bypass for images in Blink
(boo#992320)
+ CVE-2016-5143: Parameter sanitization failure in DevTools
(boo#992319)
+ CVE-2016-5144: Parameter sanitization failure in DevTools
(boo#992315)
+ CVE-2016-5146: Various fixes from internal audits, fuzzing
and other initiatives (boo#992309)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=893
2016-07-21 19:00:17 +00:00
-------------------------------------------------------------------
Thu Jul 21 18:55:21 UTC 2016 - tittiatcoke@gmail.com
- Temporarily disable fix_network_api_crash.patch. Upstream has
changed part of their code, so hopefully that resolved the issue
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=891
2016-07-21 07:48:37 +00:00
-------------------------------------------------------------------
Thu Jul 21 07:38:12 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 52.0.2743.82
* Security fixes (boo#989901):
+ CVE-2016-1706: Sandbox escape in PPAPI
+ CVE-2016-1707: URL spoofing on iOS
+ CVE-2016-1708: Use-after-free in Extensions
+ CVE-2016-1709: Heap-buffer-overflow in sfntly
+ CVE-2016-1710: Same-origin bypass in Blink
+ CVE-2016-1711: Same-origin bypass in Blink
+ CVE-2016-5127: Use-after-free in Blink
+ CVE-2016-5128: Same-origin bypass in V8
+ CVE-2016-5129: Memory corruption in V8
+ CVE-2016-5130: URL spoofing
+ CVE-2016-5131: Use-after-free in libxml
+ CVE-2016-5132: Limited same-origin bypass in Service Workers
+ CVE-2016-5133: Origin confusion in proxy authentication
+ CVE-2016-5134: URL leakage via PAC script
+ CVE-2016-5135: Content-Security-Policy bypass
+ CVE-2016-5136: Use after free in extensions
+ CVE-2016-5137: History sniffing with HSTS and CSP
+ CVE-2016-1705: Various fixes from internal audits, fuzzing
and other initiatives
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=888
2016-06-24 06:43:44 +00:00
-------------------------------------------------------------------
Accepting request 407997 from home:NickLevinson Like request 407543 but same lines edited there re-edited. OBS-URL: https://build.opensuse.org/request/show/407997 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=889
2016-07-13 00:33:24 +00:00
Mon Jul 11 00:46 UTC 2016 - Nick_Levinson@yahoo.com
- Clarification/correction to chromium-desktop-gnome and
chromium-desktop-kde software descriptions due to passwords
preservation reported by Chromium developer
-------------------------------------------------------------------
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=888
2016-06-24 06:43:44 +00:00
Fri Jun 24 06:39:52 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 51.0.2704.106
* No changelog indicated
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=885
2016-06-23 08:11:56 +00:00
-------------------------------------------------------------------
Thu Jun 23 08:10:56 UTC 2016 - tittiatcoke@gmail.com
- Add gcc60-fixes.diff to resolve the crashes observed with
chromium when compiled with GCC6
Accepting request 402945 from home:AndreasStieger:branches:network:chromium Chromium 51.0.2704.103 CVE-2016-1704 (boo#985397) OBS-URL: https://build.opensuse.org/request/show/402945 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=882
2016-06-17 14:03:36 +00:00
-------------------------------------------------------------------
Fri Jun 17 11:11:46 UTC 2016 - astieger@suse.com
- Update to Chromium 51.0.2704.103
* Security fixes:
- CVE-2016-1704: Various fixes from internal audits, fuzzing and
other initiatives (boo#985397)
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=881
2016-06-07 12:17:00 +00:00
-------------------------------------------------------------------
Tue Jun 7 12:15:02 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 51.0.2704.84
* No further changelog
Accepting request 399648 from home:AndreasStieger:branches:network:chromium - Update to Chromium 51.0.2704.79 [boo#982719] * Security fixes: - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools - CVE-2016-1700: Use-after-free in Extensions - CVE-2016-1701: Use-after-free in Autofill - CVE-2016-1702: Out-of-bounds read in Skia - CVE-2016-1703: Various fixes from internal audits, fuzzing and other initiatives. OBS-URL: https://build.opensuse.org/request/show/399648 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=879
2016-06-02 11:21:04 +00:00
-------------------------------------------------------------------
Thu Jun 2 11:08:47 UTC 2016 - astieger@suse.com
- Update to Chromium 51.0.2704.79 [boo#982719]
* Security fixes:
- CVE-2016-1696: Cross-origin bypass in Extension bindings
- CVE-2016-1697: Cross-origin bypass in Blink
- CVE-2016-1698: Information leak in Extension bindings
- CVE-2016-1699: Parameter sanitization failure in DevTools
- CVE-2016-1700: Use-after-free in Extensions
- CVE-2016-1701: Use-after-free in Autofill
- CVE-2016-1702: Out-of-bounds read in Skia
- CVE-2016-1703: Various fixes from internal audits, fuzzing
and other initiatives.
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=876
2016-05-26 04:18:27 +00:00
-------------------------------------------------------------------
Thu May 26 04:09:46 UTC 2016 - tittiatcoke@gmail.com
Accepting request 398296 from home:AndreasStieger:branches:network:chromium fix build OBS-URL: https://build.opensuse.org/request/show/398296 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=877
2016-05-26 19:15:04 +00:00
- Update to Chromium 51.0.2704.63 [boo#981886]
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=876
2016-05-26 04:18:27 +00:00
* Security fixes:
- CVE-2016-1672: Cross-origin bypass in extension bindings
- CVE-2016-1673: Cross-origin bypass in Blink
- CVE-2016-1674: Cross-origin bypass in extensions
- CVE-2016-1675: Cross-origin bypass in Blink
- CVE-2016-1676: Cross-origin bypass in extension bindings
- CVE-2016-1677: Type confusion in V8
- CVE-2016-1678: Heap overflow in V8
- CVE-2016-1679: Heap use-after-free in V8 bindings
- CVE-2016-1680: Heap use-after-free in Skia
- CVE-2016-1681: Heap overflow in PDFium
- CVE-2016-1682: CSP bypass for ServiceWorker
- CVE-2016-1683: Out-of-bounds access in libxslt
- CVE-2016-1684: Integer overflow in libxslt
- CVE-2016-1685: Out-of-bounds read in PDFium
- CVE-2016-1686: Out-of-bounds read in PDFium
- CVE-2016-1687: Information leak in extensions
- CVE-2016-1688: Out-of-bounds read in V8
- CVE-2016-1689: Heap buffer overflow in media
- CVE-2016-1690: Heap use-after-free in Autofill
- CVE-2016-1691: Heap buffer-overflow in Skia
- CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
- CVE-2016-1693: HTTP Download of Software Removal Tool
- CVE-2016-1694: HPKP pins removed on cache clearance
- CVE-2016-1695: Various fixes from internal audits, fuzzing
and other initiatives
Accepting request 398296 from home:AndreasStieger:branches:network:chromium fix build OBS-URL: https://build.opensuse.org/request/show/398296 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=877
2016-05-26 19:15:04 +00:00
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
now upstream
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=876
2016-05-26 04:18:27 +00:00
Accepting request 395140 from home:AndreasStieger:branches:network:chromium - Update to Chromium 50.0.2661.102 (boo#979859) * Security fixes: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader OBS-URL: https://build.opensuse.org/request/show/395140 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=873
2016-05-18 07:05:48 +00:00
-------------------------------------------------------------------
Fri May 13 10:54:25 UTC 2016 - astieger@suse.com
- Update to Chromium 50.0.2661.102 (boo#979859)
* Security fixes:
- CVE-2016-1667: Same origin bypass in DOM
- CVE-2016-1668: Same origin bypass in Blink V8 bindings
- CVE-2016-1669: Buffer overflow in V8
- CVE-2016-1670: Race condition in loader
Accepting request 392651 from home:AndreasStieger:branches:network:chromium 50.0.2661.94 OBS-URL: https://build.opensuse.org/request/show/392651 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=871
2016-05-03 09:41:15 +00:00
-------------------------------------------------------------------
Fri Apr 29 13:45:18 UTC 2016 - astieger@suse.com
- Update to Chromium 50.0.2661.94 (boo#977830)
* Security fixes:
- CVE-2016-1660: Out-of-bounds write in Blink
- CVE-2016-1661: Memory corruption in cross-process frames
- CVE-2016-1662: Use-after-free in extensions
- CVE-2016-1663: Use-after-free in Blink’s V8 bindings
- CVE-2016-1664: Address bar spoofing
- CVE-2016-1665: Information leak in V8
- CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives
Accepting request 391288 from home:jirislaby:branches:network:chromium - _constraints: increase memory. It takes 1.2G to build some .o, and with -j4 this results in OOM. OBS-URL: https://build.opensuse.org/request/show/391288 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=869
2016-04-28 10:52:44 +00:00
-------------------------------------------------------------------
Fri Apr 22 14:06:30 UTC 2016 - jslaby@suse.com
- _constraints: increase memory. It takes 1.2G to build some .o, and
with -j4 this results in OOM.
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=865
2016-04-14 07:56:46 +00:00
-------------------------------------------------------------------
Thu Apr 14 07:39:40 UTC 2016 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=866
2016-04-14 13:57:42 +00:00
- Update to Chromium 50.0.2661.75 (boo#975572)
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=865
2016-04-14 07:56:46 +00:00
* Security Fixes:
- CVE-2016-1652: Universal XSS in extension bindings
- CVE-2016-1653: Out-of-bounds write in V8
- CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
- CVE-2016-1654: Uninitialized memory read in media
- CVE-2016-1655: Use-after-free related to extensions
- CVE-2016-1656: Android downloaded file path restriction bypass
- CVE-2016-1657: Address bar spoofing
- CVE-2016-1658: Potential leak of sensitive information to
malicious extensions
- CVE-2016-1659: Various fixes from internal audits, fuzzing
and other initiatives
Accepting request 390181 from home:AndreasStieger:branches:network:chromium build fix OBS-URL: https://build.opensuse.org/request/show/390181 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=867
2016-04-15 14:08:00 +00:00
- add patch to fix GCC builds with component=shared_library:
chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=865
2016-04-14 07:56:46 +00:00
Accepting request 386148 from home:AndreasStieger:branches:network:chromium Chromium 49.0.2623.112 OBS-URL: https://build.opensuse.org/request/show/386148 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=863
2016-04-08 11:46:22 +00:00
-------------------------------------------------------------------
Fri Apr 8 07:55:33 UTC 2016 - astieger@suse.com
- Update to Chromium 49.0.2623.112
* Block user removal when login attempt is in progress
* Add the SuppressUnsupportedOSWarning policy setting
* Fix how Save-Page-As responds to web requests blocked by extensions
* Fix preferred width calculation for 8bit ltr runs in rtl blocks
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=860
2016-03-30 07:46:17 +00:00
-------------------------------------------------------------------
Wed Mar 30 07:42:53 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 49.0.2623.110
* No changelog available
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=859
2016-03-28 17:46:51 +00:00
-------------------------------------------------------------------
Mon Mar 28 17:44:43 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 49.0.2623.108
* Security fixes (boo#972834):
- CVE-2016-1646: Out-of-bounds read in V8
- CVE-2016-1647: Use-after-free in Navigation
- CVE-2016-1648: Use-after-free in Extensions
- CVE-2016-1649: Buffer overflow in libANGLE
- CVE-2016-1650: Various fixes from internal audits, fuzzing
and other initiatives
Accepting request 382359 from home:AndreasStieger:branches:network:chromium Adding CVE assigned to v8 in 49.0.2623.108 OBS-URL: https://build.opensuse.org/request/show/382359 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=861
2016-03-31 09:02:23 +00:00
- CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
tip of the 4.9 branch (currently 4.9.385.33).
New version OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=859
2016-03-28 17:46:51 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=855
2016-03-09 08:21:03 +00:00
-------------------------------------------------------------------
Wed Mar 9 08:09:13 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 49.0.2623.87
* Security fixes:
Accepting request 374643 from home:AndreasStieger:branches:network:chromium add bugzilla references OBS-URL: https://build.opensuse.org/request/show/374643 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=857
2016-03-17 20:24:19 +00:00
- CVE-2016-1643: Type confusion in Blink (boo#970514)
- CVE-2016-1644: Use-after-free in Blink (boo#970509)
- CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=855
2016-03-09 08:21:03 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=854
2016-03-08 09:21:20 +00:00
-------------------------------------------------------------------
Tue Mar 8 09:14:00 UTC 2016 - tittiatcoke@gmail.com
- Change the build method used on Packman.
* Drop patch no-clang-on-packman.diff . This is no longer required
as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=846
2016-03-04 10:55:57 +00:00
-------------------------------------------------------------------
Fri Mar 4 10:49:51 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 49.0.2623.75
* 26 security fixes, with the most important ones being:
- CVE-2016-1630: Same-origin bypass in Blink
- CVE-2016-1631: Same-origin bypass in Pepper Plugin
- CVE-2016-1632: Bad cast in Extensions
- CVE-2016-1633: Use-after-free in Blink
- CVE-2016-1634: Use-after-free in Blink
- CVE-2016-1635: Use-after-free in Blink
- CVE-2016-1636: SRI Validation Bypass
- CVE-2015-8126: Out-of-bounds access in libpng
- CVE-2016-1637: Information Leak in Skia
- CVE-2016-1638: WebAPI Bypass
- CVE-2016-1639: Use-after-free in WebRTC
- CVE-2016-1640: Origin confusion in Extensions UI
- CVE-2016-1641: Use-after-free in Favicon
- CVE-2016-1642: Various fixes from internal audits, fuzzing
and other initiatives
- Multiple vulnerabilities in V8 fixed at the tip of the 4.9
branch (currently 4.9.385.26)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=852
2016-03-05 12:01:11 +00:00
(boo#969333)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=846
2016-03-04 10:55:57 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=842
2016-02-19 08:37:35 +00:00
-------------------------------------------------------------------
Fri Feb 19 08:33:46 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 48.0.2564.116
* Fixes a critical security flaw:
- CVE-2016-1629: Same-origin bypass in Blink and Sandbox
Accepting request 360380 from home:AndreasStieger:branches:network:chromium add bugzilla reference OBS-URL: https://build.opensuse.org/request/show/360380 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=843
2016-02-19 10:47:27 +00:00
escape in Chrome. (boo#967376)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=842
2016-02-19 08:37:35 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=839
2016-02-15 09:24:33 +00:00
-------------------------------------------------------------------
Mon Feb 15 09:19:16 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 48.0.2564.109
* Security fixes (boo#965999)
- CVE-2016-1622: Same-origin bypass in Extensions
- CVE-2016-1623: Same-origin bypass in DOM
- CVE-2016-1624: Buffer overflow in Brotli
- CVE-2016-1625: Navigation bypass in Chrome Instant
- CVE-2016-1626: Out-of-bounds read in PDFium
- CVE-2016-1627: Various fixes from internal audits, fuzzing
and other initiatives
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=838
2016-02-13 12:06:20 +00:00
-------------------------------------------------------------------
Sat Feb 13 11:44:02 UTC 2016 - tittiatcoke@gmail.com
- Drop the libva support completely. It seems that this is causing
more issues than it actually resolves. (boo#965566)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=840
2016-02-15 15:25:04 +00:00
* Drop chromium-enable-vaapi.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=838
2016-02-13 12:06:20 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=837
2016-02-11 10:00:34 +00:00
-------------------------------------------------------------------
Thu Feb 11 09:12:47 UTC 2016 - tittiatcoke@gmail.com
- Don't build with libva support for openSUSE 13.2 and lower
(boo#966082)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=832
2016-02-09 12:58:51 +00:00
-------------------------------------------------------------------
Tue Feb 9 12:12:47 UTC 2016 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=834
2016-02-10 14:14:17 +00:00
- Drop completely the option to build with system libraries. This
could lead to issues (boo#965738)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=832
2016-02-09 12:58:51 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=826
2016-02-05 13:24:54 +00:00
-------------------------------------------------------------------
Fri Feb 5 13:12:47 UTC 2016 - tittiatcoke@gmail.com
Accepting request 358663 from home:AndreasStieger:branches:network:chromium fix changelog Zahlendreher to match actual versio OBS-URL: https://build.opensuse.org/request/show/358663 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=833
2016-02-10 14:13:21 +00:00
- Update to Chromium 48.0.2564.103
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=826
2016-02-05 13:24:54 +00:00
* No chnagelog available
Accepting request 356958 from home:scarabeus_iv:branches:network:chromium - Use spec-cleaner - Remove buildenv check that is moot for the update-alternatives script - Build against the latest libjpeg rather than jpeg6 - Use update-alternatives as is required by the specification OBS-URL: https://build.opensuse.org/request/show/356958 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=824
2016-01-31 12:23:18 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=825
2016-01-31 12:26:28 +00:00
Sun Jan 31 12:24:47 UTC 2016 - tittiatcoke@gmail.com
- Build against the in-source libjpeg to prevent graphical issues
-------------------------------------------------------------------
Accepting request 356958 from home:scarabeus_iv:branches:network:chromium - Use spec-cleaner - Remove buildenv check that is moot for the update-alternatives script - Build against the latest libjpeg rather than jpeg6 - Use update-alternatives as is required by the specification OBS-URL: https://build.opensuse.org/request/show/356958 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=824
2016-01-31 12:23:18 +00:00
Sun Jan 31 11:12:18 UTC 2016 - tchvatal@suse.com
- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=818
2016-01-28 10:04:13 +00:00
-------------------------------------------------------------------
Thu Jan 28 09:59:57 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 48.0.2564.97
* No changelog available
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=821
2016-01-29 08:02:49 +00:00
- Update the desktop-kde package so that on Leap and TW, the kwallet5
becomes the default. desktop-kde/gnome packages are no longer
recommended as that the default is to automatically detect the
password store. Only for those users that want to change this,
they can select a different setup.
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=818
2016-01-28 10:04:13 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=815
2016-01-22 19:24:03 +00:00
-------------------------------------------------------------------
Fri Jan 22 19:08:56 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 48.0.2564.82
* Security fixes:
- CVE-2016-1612: Bad cast in V8 (boo#963184)
- CVE-2016-1613: Use-after-free in PDFium (boo#963185)
- CVE-2016-1614: Information leak in Blink (boo#963186)
- CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
- CVE-2016-1616: URL Spoofing (boo#963188)
- CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
- CVE-2016-1618: Weak random number generator in Blink (boo#963190)
- CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
- CVE-2016-1620 chromium-browser: various fixes (boo#963192)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=814
2016-01-14 15:42:08 +00:00
-------------------------------------------------------------------
Thu Jan 14 15:22:38 UTC 2016 - tittiatcoke@gmail.com
- Update to Chromium 47.0.2526.111.
* No changelog available
Accepting request 351142 from home:StefanBruens:branches:network:chromium enable SSE2 on x86_64 fix crash when enabling chromecast extension OBS-URL: https://build.opensuse.org/request/show/351142 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=812
2015-12-29 20:42:58 +00:00
-------------------------------------------------------------------
Mon Dec 28 18:14:40 UTC 2015 - stefan.bruens@rwth-aachen.de
- Enable SSE2 on x86_64
-------------------------------------------------------------------
Sun Dec 27 21:44:50 UTC 2015 - stefan.bruens@rwth-aachen.de
- Fix crash when trying to enable chromecast extension
* Add patch: fix_network_api_crash.patch
Fix https://code.google.com/p/chromium/issues/detail?id=572539
Accepting request 349749 from home:AndreasStieger:branches:network:chromium Security update to Chromium 47.0.2525.106 * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] OBS-URL: https://build.opensuse.org/request/show/349749 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=808
2015-12-20 14:28:42 +00:00
-------------------------------------------------------------------
Sun Dec 20 12:44:49 UTC 2015 - astieger@suse.com
- Update to Chromium 47.0.2525.106, fixing the following security
issue:
* CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]
Accepting request 350139 from home:boombatower:branches:network:chromium Enable VA-API hardware acceleration in Linux. OBS-URL: https://build.opensuse.org/request/show/350139 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=810
2015-12-22 12:11:18 +00:00
-------------------------------------------------------------------
Mon Dec 14 04:31:08 UTC 2015 - jimmy@boombatower.com
- Enable VA-API hardware acceleration in Linux.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=811
2015-12-22 15:02:17 +00:00
* chromium-enable-vaapi.patch
Accepting request 350139 from home:boombatower:branches:network:chromium Enable VA-API hardware acceleration in Linux. OBS-URL: https://build.opensuse.org/request/show/350139 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=810
2015-12-22 12:11:18 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=798
2015-12-05 10:45:51 +00:00
-------------------------------------------------------------------
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=799
2015-12-10 08:54:35 +00:00
Thu Dec 10 07:11:29 UTC 2015 - tittiatcoke@gmail.com
Accepting request 348796 from home:AndreasStieger:branches:network:chromium add tracking OBS-URL: https://build.opensuse.org/request/show/348796 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=806
2015-12-14 14:03:29 +00:00
- Update to Chromium 47.0.2526.80 [boo#958481]
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=799
2015-12-10 08:54:35 +00:00
* Security fixes
- CVE-2015-6788: Type confusion in extensions
- CVE-2015-6789: Use-after-free in Blink
- CVE-2015-6790: Escaping issue in saved pages
- CVE-2015-6791: Various fixes from internal audits, fuzzing
and other initiatives
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=802
2015-12-11 09:13:09 +00:00
- Drop unused patch fix-clang.diff.
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=799
2015-12-10 08:54:35 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=798
2015-12-05 10:45:51 +00:00
Sat Dec 5 10:40:00 UTC 2015 - tittiatcoke@gmail.com
- Enable the possibility to utilize the Widevine plugin
within chromium. (boo#954103)
* Add patch: fix_building_widevinecdm_with_chromium.patch
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=793
2015-12-02 19:04:38 +00:00
-------------------------------------------------------------------
Wed Dec 2 18:49:23 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 47.0.2526.73
* Security fixes (boo#957519)
- CVE-2015-6765: Use-after-free in AppCache
- CVE-2015-6766: Use-after-free in AppCache
- CVE-2015-6767: Use-after-free in AppCache
- CVE-2015-6768: Cross-origin bypass in DOM
- CVE-2015-6769: Cross-origin bypass in core
- CVE-2015-6770: Cross-origin bypass in DOM
- CVE-2015-6771: Out of bounds access in v8
- CVE-2015-6772: Cross-origin bypass in DOM
- CVE-2015-6764: Out of bounds access in v8
- CVE-2015-6773: Out of bounds access in Skia
- CVE-2015-6774: Use-after-free in Extensions
- CVE-2015-6775: Type confusion in PDFium
- CVE-2015-6776: Out of bounds access in PDFium
- CVE-2015-6777: Use-after-free in DOM
- CVE-2015-6778: Out of bounds access in PDFium
- CVE-2015-6779: Scheme bypass in PDFium
- CVE-2015-6780: Use-after-free in Infobars
- CVE-2015-6781: Integer overflow in Sfntly
- CVE-2015-6782: Content spoofing in Omnibox
- CVE-2015-6783: Signature validation issue in
Android Crazy Linker.
- CVE-2015-6784: Escaping issue in saved pages
- CVE-2015-6785: Wildcard matching issue in CSP
- CVE-2015-6786: Scheme bypass in CSP
- CVE-2015-6787: Various fixes from internal audits, fuzzing
and other initiatives.
- Multiple vulnerabilities in V8 fixed at the tip of the
4.7 branch (currently 4.7.80.23)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=788
2015-11-11 09:00:14 +00:00
-------------------------------------------------------------------
Wed Nov 11 08:55:19 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 46.0.2490.86
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=789
2015-11-11 09:04:00 +00:00
* Security fixes (boo#954579):
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=788
2015-11-11 09:00:14 +00:00
- CVE-2015-1302: Information leak in PDF viewer
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=786
2015-10-23 17:37:30 +00:00
-------------------------------------------------------------------
Fri Oct 23 17:22:51 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 46.0.2490.80
* No changelog available
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=781
2015-10-19 12:03:35 +00:00
-------------------------------------------------------------------
Mon Oct 19 13:00:57 UTC 2015 - tittiatcoke@gmail.com
- Change the default homepage based on the new landingpage
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=783
2015-10-19 12:06:05 +00:00
for the openSUSE Project. (boo#950957)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=781
2015-10-19 12:03:35 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=776
2015-10-14 18:44:09 +00:00
-------------------------------------------------------------------
Wed Oct 14 18:31:57 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 46.0.2490.71
* Security fixes (boo#950290)
- CVE-2015-6755: Cross-origin bypass in Blink
- CVE-2015-6756: Use-after-free in PDFium
- CVE-2015-6757: Use-after-free in ServiceWorker
- CVE-2015-6758: Bad-cast in PDFium
- CVE-2015-6759: Information leakage in LocalStorage
- CVE-2015-6760: Improper error handling in libANGLE
- CVE-2015-6761: Memory corruption in FFMpeg
- CVE-2015-6762: CORS bypass via CSS fonts
- CVE-2015-6763: Various fixes from internal audits, fuzzing
and other initiatives
- Multiple vulnerabilities in V8 fixed at the tip of the
Accepting request 344167 from home:AndreasStieger:branches:network:chromium add past CVE remove duplicate version update changelog entry OBS-URL: https://build.opensuse.org/request/show/344167 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=790
2015-11-13 11:56:56 +00:00
4.6 branch (currently 4.6.85.23) CVE-2015-7834
Accepting request 339051 from home:AndreasStieger:branches:network:chromium drop upstreamed correct-blacklist.diff OBS-URL: https://build.opensuse.org/request/show/339051 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=777
2015-10-15 06:42:15 +00:00
- drop upstreamed correct-blacklist.diff
Accepting request 339099 from home:AndreasStieger:branches:network:chromium fix build OBS-URL: https://build.opensuse.org/request/show/339099 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=778
2015-10-16 11:55:19 +00:00
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
to fix build
- remove remoting_locales from spec
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=776
2015-10-14 18:44:09 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=773
2015-10-03 06:28:59 +00:00
-------------------------------------------------------------------
Sat Oct 3 06:20:10 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 45.0.2454.101
* Security fixes:
Accepting request 337612 from home:AndreasStieger:branches:network:chromium add bugzilla references OBS-URL: https://build.opensuse.org/request/show/337612 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=774
2015-10-10 20:46:16 +00:00
- CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
- CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=773
2015-10-03 06:28:59 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=771
2015-09-22 11:01:41 +00:00
-------------------------------------------------------------------
Tue Sep 22 10:51:48 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 45.0.2454.99
- No changelog available
- Add upstream patch correct-blacklist.diff
* This should restore the correct behavior of the option
--ignore-gpu-blacklist.
https://code.google.com/p/chromium/issues/detail?id=509336
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=769
2015-09-16 20:07:17 +00:00
-------------------------------------------------------------------
Wed Sep 16 20:06:33 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 45.0.2454.93
- No changelog available
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=767
2015-09-11 06:19:57 +00:00
-------------------------------------------------------------------
Fri Sep 11 06:15:41 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 45.0.2454.85
Security fixes:
* CVE-2015-1291: Cross-origin bypass in DOM
* CVE-2015-1292: Cross-origin bypass in ServiceWorker
* CVE-2015-1293: Cross-origin bypass in DOM
* CVE-2015-1294: Use-after-free in Skia
* CVE-2015-1295: Use-after-free in Printing
* CVE-2015-1296: Character spoofing in omnibox
* CVE-2015-1297: Permission scoping error in WebRequest
* CVE-2015-1298: URL validation error in extensions
* CVE-2015-1299: Use-after-free in Blink
* CVE-2015-1300: Information leak in Blink
* CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=765
2015-08-05 10:36:33 +00:00
-------------------------------------------------------------------
Wed Aug 5 10:25:10 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 44.0.2403.130
* No changelog available
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=763
2015-07-29 09:14:11 +00:00
-------------------------------------------------------------------
Wed Jul 29 08:57:03 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 44.0.2403.125
* No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
version for the main chromium package. This should prevent the
issues arised from the libffmpeg switch that Google did recently
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=761
2015-07-25 12:48:17 +00:00
-------------------------------------------------------------------
Sat Jul 25 12:35:29 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 44.0.2403.107
* No changelog available
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=758
2015-07-21 19:09:08 +00:00
-------------------------------------------------------------------
Tue Jul 21 18:56:57 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 44.0.2403.89
* A number of new apps/extension APIs
* Lots of under the hood changes for stability and performance
* Security fixes:
- CVE-2015-1271: Heap-buffer-overflow in pdfium
- CVE-2015-1273: Heap-buffer-overflow in pdfium
- CVE-2015-1274: Settings allowed executable files to run
immediately after download
- CVE-2015-1275: UXSS in Chrome for Android
- CVE-2015-1276: Use-after-free in IndexedDB
- CVE-2015-1279: Heap-buffer-overflow in pdfium
- CVE-2015-1280: Memory corruption in skia
- CVE-2015-1281: CSP bypass
- CVE-2015-1282: Use-after-free in pdfium
- CVE-2015-1283: Heap-buffer-overflow in expat
- CVE-2015-1284: Use-after-free in blink
- CVE-2015-1286: UXSS in blink
- CVE-2015-1287: SOP bypass with CSS
- CVE-2015-1270: Uninitialized memory read in ICU
- CVE-2015-1272: Use-after-free related to unexpected GPU
process termination
- CVE-2015-1277: Use-after-free in accessibility
- CVE-2015-1278: URL spoofing using pdf files
- CVE-2015-1285: Information leak in XSS auditor
- CVE-2015-1288: Spell checking dictionaries fetched over HTTP
- CVE-2015-1289: Various fixes from internal audits, fuzzing
and other initiatives
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=757
2015-07-15 12:10:04 +00:00
-------------------------------------------------------------------
Wed Jul 15 12:01:42 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.134
Update of the Pepper Flash plugin to 18.0.0.209
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=756
2015-07-08 03:58:49 +00:00
-------------------------------------------------------------------
Wed Jul 8 03:38:30 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.132
No changelog available
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=754
2015-06-23 12:34:47 +00:00
-------------------------------------------------------------------
Tue Jun 23 12:29:39 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.130
- Security fixes (boo#935723)
* CVE-2015-1266: Scheme validation error in WebUI
* CVE-2015-1268: Cross-origin bypass in Blink
* CVE-2015-1267: Cross-origin bypass in Blink
* CVE-2015-1269: Normalization error in HSTS/HPKP preload list
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=747
2015-06-17 18:11:37 +00:00
-------------------------------------------------------------------
Wed Jun 17 18:08:51 UTC 2015 - tittiatcoke@gmail.com
- Add the buildflag enable_hotwording=0 to prevent that Chromium
downloads a binary blob for speechrecognition (boo#935022)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=752
2015-06-17 20:45:42 +00:00
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
patch fixes the python regular expression and ensures to return
a two digit value for the GCC version
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=747
2015-06-17 18:11:37 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=745
2015-06-12 13:56:34 +00:00
-------------------------------------------------------------------
Fri Jun 12 13:51:28 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.125
* Bug-fixes:
- esolved browser font magnification/scaling issue.
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=743
2015-05-27 10:56:04 +00:00
-------------------------------------------------------------------
Wed May 27 10:49:49 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.81
* Bug-fixes:
- Fixed an issue where sometimes a blank page would print
- Icons not displaying properly on Linux
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=741
2015-05-20 11:14:00 +00:00
-------------------------------------------------------------------
Wed May 20 11:02:32 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 43.0.2357.65
* Security fixes:
- CVE-2015-1252: Sandbox escape in Chrome
- CVE-2015-1253: Cross-origin bypass in DOM
- CVE-2015-1254: Cross-origin bypass in Editing
- CVE-2015-1255: Use-after-free in WebAudio
- CVE-2015-1256: Use-after-free in SVG
- CVE-2015-1251: Use-after-free in Speech
- CVE-2015-1257: Container-overflow in SVG
- CVE-2015-1258: Negative-size parameter in Libvpx
- CVE-2015-1259: Uninitialized value in PDFium
- CVE-2015-1260: Use-after-free in WebRTC
- CVE-2015-1261: URL bar spoofing
- CVE-2015-1262: Uninitialized value in Blink
- CVE-2015-1263: Insecure download of spellcheck dictionary
- CVE-2015-1264: Cross-site scripting in bookmarks
- CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
- Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=739
2015-04-29 08:59:05 +00:00
-------------------------------------------------------------------
Wed Apr 29 08:54:17 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 42.0.2311.135
* Security fixes:
- CVE-2015-1243: Use-after-free in DOM
- CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
and 3 more security fixes.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=738
2015-04-27 13:27:32 +00:00
-------------------------------------------------------------------
Mon Apr 27 13:26:00 UTC 2015 - tittiatcoke@gmail.com
- Fix for missing Chromium icon in the taskbar.
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=733
2015-04-15 14:21:28 +00:00
-------------------------------------------------------------------
Wed Apr 15 14:11:48 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 42.0.2311.90
* A number of new apps, extension and Web Platform APIs (including the Push API!)
* Lots of under the hood changes for stability and performance
* Security fixes, including:
- CVE-2015-1235: Cross-origin-bypass in HTML parser
- CVE-2015-1236: Cross-origin-bypass in Blink
- CVE-2015-1237: Use-after-free in IPC
- CVE-2015-1238: Out-of-bounds write in Skia
- CVE-2015-1240: Out-of-bounds read in WebGL
- CVE-2015-1241: Tap-Jacking
- CVE-2015-1242: Type confusion in V8
- CVE-2015-1244: HSTS bypass in WebSockets
- CVE-2015-1245: Use-after-free in PDFium
- CVE-2015-1246: Out-of-bounds read in Blink
- CVE-2015-1247: Scheme issues in OpenSearch
- CVE-2015-1248: SafeBrowsing bypass
- CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
- Multiple vulnerabilities in V8 fixed
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=731
2015-04-02 13:05:20 +00:00
-------------------------------------------------------------------
Thu Apr 2 13:01:00 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 41.0.2272.118
Security fixes:
* CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
can lead to remote code execution outside of
the sandbox
* CVE-2015-1234: Buffer overflow via race condition in GPU
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=729
2015-03-21 08:03:43 +00:00
-------------------------------------------------------------------
Sat Mar 21 07:33:54 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 41.0.2272.101
* Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=727
2015-03-12 12:57:45 +00:00
-------------------------------------------------------------------
Thu Mar 12 12:55:23 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 41.0.2272.89
* Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=724
2015-03-04 10:03:59 +00:00
-------------------------------------------------------------------
Wed Mar 4 09:57:26 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 41.0.2272.76
Security fixes:
* CVE-2015-1212: Out-of-bounds write in media
* CVE-2015-1213: Out-of-bounds write in skia filters
* CVE-2015-1214: Out-of-bounds write in skia filters
* CVE-2015-1215: Out-of-bounds write in skia filters
* CVE-2015-1216: Use-after-free in v8 bindings
* CVE-2015-1217: Type confusion in v8 bindings
* CVE-2015-1218: Use-after-free in dom
* CVE-2015-1219: Integer overflow in webgl
* CVE-2015-1220: Use-after-free in gif decoder
* CVE-2015-1221: Use-after-free in web databases
* CVE-2015-1222: Use-after-free in service workers
* CVE-2015-1223: Use-after-free in dom
* CVE-2015-1230: Type confusion in v8
* CVE-2015-1224: Out-of-bounds read in vpxdecoder
* CVE-2015-1225: Out-of-bounds read in pdfium
* CVE-2015-1226: Validation issue in debugger
* CVE-2015-1227: Uninitialized value in blink
* CVE-2015-1228: Uninitialized value in rendering
* CVE-2015-1229: Cookie injection via proxies
* CVE-2015-1231: Various fixes from internal audits
* Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch
Accepting request 288113 from home:msmeissn:branches:network:chromium regular diskusage is more like 20GB+ The reason you do not see this massive diskusage in network:chromium/chromium is because you build without debuginfos. (see osc meta pkg) OBS-URL: https://build.opensuse.org/request/show/288113 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=722
2015-03-01 15:41:11 +00:00
-------------------------------------------------------------------
Fri Feb 27 16:13:03 UTC 2015 - meissner@suse.com
- regular diskusage is more like 20GB+
Accepting request 287465 from home:msmeissn:branches:network:chromium - uses around 5.8GB for building, assign like 6GB in _constraints OBS-URL: https://build.opensuse.org/request/show/287465 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=716
2015-02-24 11:11:15 +00:00
-------------------------------------------------------------------
Mon Feb 23 16:06:08 UTC 2015 - meissner@suse.com
- uses around 5.8GB for building, assign like 6GB in _constraints
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=715
2015-02-20 18:26:39 +00:00
-------------------------------------------------------------------
Fri Feb 20 17:47:30 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 40.0.2214.115
* Bugfixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=714
2015-02-18 12:48:48 +00:00
-------------------------------------------------------------------
Tue Feb 18 12:47:30 UTC 2015 - tittiatcoke@gmail.com
- Utilize the _service file to download the chromium tarball
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=710
2015-02-08 21:23:16 +00:00
-------------------------------------------------------------------
Sun Feb 8 21:13:30 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 40.0.2214.111
* Security Fixes:
- CVE-2015-1209: Use-after-free in DOM
- CVE-2015-1210: Cross-origin-bypass in V8 bindings
- CVE-2015-1211: Privilege escalation using service workers
- CVE-2015-1212: Various fixes from internal audits, fuzzing
and other initiatives
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=708
2015-01-31 16:54:42 +00:00
-------------------------------------------------------------------
Sat Jan 31 16:35:39 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 40.0.2214.94
- Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=707
2015-01-28 07:55:47 +00:00
-------------------------------------------------------------------
Wed Jan 28 07:53:55 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 40.0.2214.93
- Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=704
2015-01-23 16:40:16 +00:00
-------------------------------------------------------------------
Fri Jan 23 16:26:27 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 40.0.2214.91
* Security Fixes:
- CVE-2014-7923: Memory corruption in ICU
- CVE-2014-7924: Use-after-free in IndexedDB
- CVE-2014-7925: Use-after-free in WebAudio
- CVE-2014-7926: Memory corruption in ICU
- CVE-2014-7927: Memory corruption in V8
- CVE-2014-7928: Memory corruption in V8
- CVE-2014-7930: Use-after-free in DOM
- VE-2014-7931: Memory corruption in V8
- CVE-2014-7929: Use-after-free in DOM
- CVE-2014-7932: Use-after-free in DOM
- CVE-2014-7933: Use-after-free in FFmpeg
- CVE-2014-7934: Use-after-free in DOM
- CVE-2014-7935: Use-after-free in Speech
- CVE-2014-7936: Use-after-free in Views
- CVE-2014-7937: Use-after-free in FFmpeg
- CVE-2014-7938: Memory corruption in Fonts
- CVE-2014-7939: Same-origin-bypass in V8
- CVE-2014-7940: Uninitialized-value in ICU
- CVE-2014-7941: Out-of-bounds read in UI
- CVE-2014-7942: Uninitialized-value in Fonts
- CVE-2014-7943: Out-of-bounds read in Skia
- CVE-2014-7944: Out-of-bounds read in PDFium
- CVE-2014-7945: Out-of-bounds read in PDFium
- CVE-2014-7946: Out-of-bounds read in Fonts
- CVE-2014-7947: Out-of-bounds read in PDFium
- CVE-2014-7948: Caching error in AppCache
- CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
- Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=702
2015-01-14 14:40:54 +00:00
-------------------------------------------------------------------
Tue Jan 13 21:34:07 UTC 2015 - tittiatcoke@gmail.com
- Update to Chromium 39.0.2171.99
* Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=700
2014-12-10 09:07:25 +00:00
-------------------------------------------------------------------
Wed Dec 10 09:05:47 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 39.0.2171.95
* Bugfixes
Accepting request 263551 from home:Ledest:bashisms fix using 'echo' command in chromium-browser.sh script OBS-URL: https://build.opensuse.org/request/show/263551 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=698
2014-12-01 09:09:35 +00:00
-------------------------------------------------------------------
Sun Nov 30 22:34:00 UTC 2014 - Led <ledest@gmail.com>
- fix using 'echo' command in chromium-browser.sh script
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=697
2014-11-26 09:33:34 +00:00
-------------------------------------------------------------------
Wed Nov 26 09:31:05 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 39.0.2171.71
* Bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=694
2014-11-19 12:56:43 +00:00
-------------------------------------------------------------------
Wed Nov 19 12:51:03 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 39.0.2171.65
* Security fixes:
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=695
2014-11-20 10:30:57 +00:00
- CVE-2014-7899: Address bar spoofing (boo#906320)
- CVE-2014-7900: Use-after-free in pdfium (boo#906317)
- CVE-2014-7901: Integer overflow in pdfium (boo#906322)
- CVE-2014-7902: Use-after-free in pdfium (boo#906328)
- CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
- CVE-2014-7904: Buffer overflow in Skia (boo#906321)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=694
2014-11-19 12:56:43 +00:00
- CVE-2014-7905: Flaw allowing navigation to intents that do
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=695
2014-11-20 10:30:57 +00:00
not have the BROWSABLE category (boo#906330)
- CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=694
2014-11-19 12:56:43 +00:00
- CVE-2014-0574: Double-free in Flash
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=695
2014-11-20 10:30:57 +00:00
- CVE-2014-7907: Use-after-free in blink (boo#906323)
- CVE-2014-7908: Integer overflow in media (boo#906324)
- CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=694
2014-11-19 12:56:43 +00:00
- CVE-2014-7910: Various fixes from internal audits, fuzzing
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=695
2014-11-20 10:30:57 +00:00
and other initiatives (boo#906327)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=694
2014-11-19 12:56:43 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=693
2014-11-14 07:59:58 +00:00
-------------------------------------------------------------------
Fri Nov 14 07:53:38 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 38.0.2125.122
* Several bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=691
2014-10-28 14:27:39 +00:00
-------------------------------------------------------------------
Tue Oct 28 14:16:04 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 38.0.2125.111
* Several bugfixes
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=688
2014-10-15 21:08:58 +00:00
-------------------------------------------------------------------
Wed Oct 15 21:03:27 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 38.0.2125.104
* Several bugfixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=689
2014-10-18 06:54:59 +00:00
- Updated source url to point to the right location
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=678
2014-09-10 20:44:20 +00:00
-------------------------------------------------------------------
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=681
2014-10-08 09:18:43 +00:00
Wed Oct 8 09:12:25 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 38.0.2125.101
This update includes 159 security fixes, including 113 relatively
minor fixes. Highlighted securtiy fixes are:
CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
remote code execution outside of the sandbox
CVE-2014-3189: Out-of-bounds read in PDFium
CVE-2014-3190: Use-after-free in Events
CVE-2014-3191: Use-after-free in Rendering
CVE-2014-3192: Use-after-free in DOM
CVE-2014-3193: Type confusion in Session Management
CVE-2014-3194: Use-after-free in Web Workers
CVE-2014-3195: Information Leak in V8
CVE-2014-3196: Permissions bypass in Windows Sandbox
CVE-2014-3197: Information Leak in XSS Auditor
CVE-2014-3198: Out-of-bounds read in PDFium
CVE-2014-3199: Release Assert in V8 bindings
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=682
2014-10-08 09:22:10 +00:00
CVE-2014-3200: Various fixes from internal audits, fuzzing and
other initiatives
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=681
2014-10-08 09:18:43 +00:00
- Drop the build of the Native Client. This is actually not a build
as that prebuild binaries are being shipped. Also Google no
longer provides prebuild binaries for the NativeClient for 32bit.
Chromium as webbrowser is not affected by this and it bring
Chromium inline with the regulations that prebuild binaries
should not be shipped.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=682
2014-10-08 09:22:10 +00:00
* toolchaing_linux tarball dropped
* Spec-file cleaned for NaCl stuff
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=681
2014-10-08 09:18:43 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=687
2014-10-08 09:55:11 +00:00
- Added patch no-clang-on-packman.diff to prevent the usage of
clang on packman, which is not supported there
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=681
2014-10-08 09:18:43 +00:00
-------------------------------------------------------------------
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=678
2014-09-10 20:44:20 +00:00
Wed Sep 10 20:40:33 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 37.0.2062.120
* Security Fixes (bnc#896106)
- CVE-2014-3178: Use-after-free in rendering
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=675
2014-09-07 08:09:00 +00:00
-------------------------------------------------------------------
Sun Sep 7 07:46:20 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 37.0.2062.103
* This addresses some user feedback related to how Chrome
renders text when display scaling is set to 125% or lower.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=676
2014-09-07 08:26:40 +00:00
- Combine the two toolchain tars into a single one.
Accepting request 246969 from home:mayerjosua:mozilla fix building for and on ARM add arm performance improvement patches from archlinux OBS-URL: https://build.opensuse.org/request/show/246969 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=672
2014-09-01 07:27:07 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=674
2014-09-01 07:35:38 +00:00
Mon Sep 1 07:33:24 UTC 2014 - tittiatcoke@gmail.com
- Switch to shared libraries as a global default. This hopefully
speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
sub-package for it. This should resolve build issues when having
the debug flag on.
-------------------------------------------------------------------
Sun Aug 31 00:39:34 UTC 2014 - josua.m@t-online.de
Accepting request 246969 from home:mayerjosua:mozilla fix building for and on ARM add arm performance improvement patches from archlinux OBS-URL: https://build.opensuse.org/request/show/246969 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=672
2014-09-01 07:27:07 +00:00
- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=664
2014-08-27 12:35:31 +00:00
-------------------------------------------------------------------
Wed Aug 27 11:53:24 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 37.0.2062.94
Security Fixes (bnc#893720)
* CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
sync, and extensions that can lead to remote code execution
outside of the sandbox.
* CVE-2014-3168: Use-after-free in SVG
* CVE-2014-3169: Use-after-free in DOM
* CVE-2014-3170: Extension permission dialog spoofing
* CVE-2014-3171: Use-after-free in bindings
* CVE-2014-3172: Issue related to extension debugging
* CVE-2014-3173: Uninitialized memory read in WebGL
* CVE-2014-3174: Uninitialized memory read in Web Audio
* CVE-2014-3175: Various fixes from internal audits, fuzzing
and other initiatives
and 41 more security fixes for which no description was given
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=669
2014-08-28 11:37:18 +00:00
- Drop the following patches as they are no longer required:
* chromium-23.0.1245-no-test-sources.patch
* no-download-nacl.diff
* chromium-no-courgette.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=666
2014-08-27 13:24:56 +00:00
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=660
2014-08-13 12:44:47 +00:00
-------------------------------------------------------------------
Wed Aug 13 12:19:10 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 36.0.1985.143
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=661
2014-08-13 13:10:05 +00:00
Security Fixes (bnc#891717)
New update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=660
2014-08-13 12:44:47 +00:00
* CVE-2014-3165: Use-after-free in web sockets
* CVE-2014-3166: Information disclosure in SPDY
* CVE-2014-3167: Various fixes from internal audits, fuzzing and
other initiatives
and 9 more fixes for which no description was given
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=659
2014-08-05 21:47:53 +00:00
-------------------------------------------------------------------
Tue Aug 5 21:47:00 UTC 2014 - tittiatcoke@gmail.com
- Add directory remoting_locales to the package to complete
the language support within Chromium
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=652
2014-07-22 08:41:43 +00:00
-------------------------------------------------------------------
Tue Jul 22 08:19:51 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 36.0.1985.125
New Functionality:
* Rich Notifications Improvements
* An Updated Incognito / Guest NTP design
* The addition of a Browser crash recovery bubble
* Chrome App Launcher for Linux
* Lots of under the hood changes for stability and performance
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=657
2014-07-24 13:22:37 +00:00
Security Fixes (bnc#887952,bnc#887955):
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=652
2014-07-22 08:41:43 +00:00
* CVE-2014-3160: Same-Origin-Policy bypass in SVG
* CVE-2014-3162: Various fixes from internal audits, fuzzing
and other initiatives
and 24 more fixes for which no description was given.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=654
2014-07-22 09:59:29 +00:00
Packaging changes:
* Switch to newer method to retrieve toolchain packages. Dropping
the three naclsdk_*tgz files. Everything is now included in the
toolchain_linux_x86.tar.bz2 tarball
* Add Courgette.tar.xz as that the build process now requires
some files from Courgette in order to build succesfully. This
does not mean that Courgette is build/delivered.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=652
2014-07-22 08:41:43 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=650
2014-06-11 11:29:04 +00:00
-------------------------------------------------------------------
Wed Jun 11 11:01:07 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 35.0.1916.153
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=657
2014-07-24 13:22:37 +00:00
Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=650
2014-06-11 11:29:04 +00:00
* CVE-2014-3154: Use-after-free in filesystem api
* CVE-2014-3155: Out-of-bounds read in SPDY
* CVE-2014-3156: Buffer overflow in clipboard
* CVE-2014-3157: Heap overflow in media
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=645
2014-05-22 08:54:10 +00:00
-------------------------------------------------------------------
Thu May 22 08:48:29 UTC 2014 - tittiatcoke@gmail.com
- Use also Ninja for openSUSE 12.3. This is the only method
supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
not complete the link process and dies with out-of-memory, etc.
Drop the specific Arm patches:
* arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
chromium-fix-arm-sysroot.patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=640
2014-05-21 15:17:56 +00:00
-------------------------------------------------------------------
Wed May 21 14:54:37 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 35.0.1916.114
New Functionality
* More developer control over touch input
* New JavaScript features
* Unprefixed Shadow DOM
* A number of new apps/extension APIs
* Lots of under the hood changes for stability and performance
Security fixes:
* CVE-2014-1743: Use-after-free in styles
* CVE-2014-1744: Integer overflow in audio
* CVE-2014-1745: Use-after-free in SVG
* CVE-2014-1746: Out-of-bounds read in media filters
* CVE-2014-1747: UXSS with local MHTML file
* CVE-2014-1748: UI spoofing with scrollbar
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=647
2014-05-23 10:45:17 +00:00
* CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
* CVE-2014-3152: Integer underflow in V8 fixed
and 17 more for which no detailed information is given.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=640
2014-05-21 15:17:56 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=643
2014-05-21 18:11:05 +00:00
- Drop patch chromium-vendor.patch.in as that does no longer apply
due to upstream changes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=638
2014-05-14 19:15:01 +00:00
-------------------------------------------------------------------
Wed May 14 19:12:29 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 34.0.1847.137
* Security updates:
- CVE-2014-1740: Use-after-free in WebSockets
- CVE-2014-1741: Integer overflow in DOM range
- CVE-2014-1742: Use-after-free in editing
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=636
2014-04-28 09:15:51 +00:00
-------------------------------------------------------------------
Mon Apr 28 08:48:49 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 34.0.1847.132
* Security update:
- CVE-2014-1730: Type confusion in V8
- CVE-2014-1731: Type confusion in DOM
- CVE-2014-1732: Use-after-free in Speech Recognition
- CVE-2014-1733: Compiler bug in Seccomp-BPF
- CVE-2014-1734: Various fixes from internal audits, fuzzing
and other initiatives
- CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
version 3.24.35.33
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=635
2014-04-25 16:28:02 +00:00
-------------------------------------------------------------------
Fri Apr 25 16:20:59 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 34.0.1847.131
* Bugfixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=631
2014-04-10 15:27:52 +00:00
-------------------------------------------------------------------
Thu Apr 10 15:27:15 UTC 2014 - tittiatcoke@gmail.com
- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
issue on ARM with regards to missing symbols.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=628
2014-04-09 07:25:58 +00:00
-------------------------------------------------------------------
Wed Apr 9 07:25:09 UTC 2014 - tittiatcoke@gmail.com
- Add patch arm_use_gold.patch to use the right gold binaries on
ARM. Hopefully this resolves the build issues with running out of
memory
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=623
2014-04-08 20:33:29 +00:00
-------------------------------------------------------------------
Tue Apr 8 20:20:38 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 34.0.1847.116
* Responsive Images and Unprefixed Web Audio
* Import supervised users onto new computers
* A number of new apps/extension APIs
* Lots of under the hood changes for stability and performance
- Security fixes:
* CVE-2014-1716: UXSS in V8
* CVE-2014-1717: OOB access in V8
* CVE-2014-1718: Integer overflow in compositor
* CVE-2014-1719: Use-after-free in web workers
* CVE-2014-1720: Use-after-free in DOM
* CVE-2014-1721: Memory corruption in V8
* CVE-2014-1722: Use-after-free in rendering
* CVE-2014-1723: Url confusion with RTL characters
* CVE-2014-1724: Use-after-free in speech
* CVE-2014-1725: OOB read with window property
* CVE-2014-1726: Local cross-origin bypass
* CVE-2014-1727: Use-after-free in forms
* CVE-2014-1728: Various fixes from internal audits,
fuzzing and other initiatives
* CVE-2014-1729: Multiple vulnerabilities in V8
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=632
2014-04-11 16:14:55 +00:00
- No longer build against system libraries as that Chromium works
a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
requires it during the initial build phase. It just contains some
utilities and nothing from it is being installed.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=623
2014-04-08 20:33:29 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=621
2014-04-06 14:07:46 +00:00
-------------------------------------------------------------------
Sun Apr 6 14:06:48 UTC 2014 - tittiatcoke@gmail.com
- If people want to install newer versions of the ffmpeg library
then let them. This is what they want.
- Remove the buildscript from the sources
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=619
2014-03-17 07:37:51 +00:00
-------------------------------------------------------------------
Mon Mar 17 07:33:21 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 33.0.1750.152
Stable channel uodate:
- Security fixes:
* CVE-2014-1713: Use-after-free in Blink bindings
* CVE-2014-1714: Windows clipboard vulnerability
* CVE-2014-1705: Memory corruption in V8
* CVE-2014-1715: Directory traversal issue
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=612
2014-02-21 13:22:47 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=618
2014-03-13 06:44:58 +00:00
Thu Mar 13 06:31:45 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 33.0.1750.149
Stable channel uodate:
- Security fixes:
* CVE-2014-1700: Use-after-free in speech
* CVE-2014-1701: UXSS in events
* CVE-2014-1702: Use-after-free in web database
* CVE-2014-1703: Potential sandbox escape due to a
use-after-free in web sockets
* CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
version 3.23.17.18
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=612
2014-02-21 13:22:47 +00:00
Fri Feb 21 12:52:21 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 33.0.1750.117
Stable channel update:
- Security Fixes:
* CVE-2013-6653: Use-after-free related to web contents
* CVE-2013-6654: Bad cast in SVG
* CVE-2013-6655: Use-after-free in layout
* CVE-2013-6656: Information leak in XSS auditor
* CVE-2013-6657: Information leak in XSS auditor
* CVE-2013-6658: Use-after-free in layout
* CVE-2013-6659: Issue with certificates validation in TLS
handshake
* CVE-2013-6660: Information leak in drag and drop
* CVE-2013-6661: Various fixes from internal audits, fuzzing
and other initiatives. Of these, seven are
fixes for issues that could have allowed for
sandbox escapes from compromised renderers.
- Other:
- Google Chrome Frame has been retired
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=613
2014-02-21 15:23:13 +00:00
- Added gn-binaries.tar.xz to have the right version of the Google
depot tools during build.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=616
2014-02-21 21:20:37 +00:00
- Added patch arm_disable_gn.patch to disable GN on ARM builds
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=613
2014-02-21 15:23:13 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=610
2014-01-28 17:57:29 +00:00
-------------------------------------------------------------------
Tue Jan 28 17:50:25 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 32.0.1700.102
Stable channel update:
- Security Fixes:
* CVE-2013-6649: Use-after-free in SVG images
* CVE-2013-6650: Memory corruption in V8
* and 12 other fixes
- Other:
* Mouse Pointer disappears after exiting full-screen mode
* Drag and drop files into Chromium may not work properly
* Quicktime Plugin crashes in Chromium
* Chromium becomes unresponsive
* Trackpad users may not be able to scroll horizontally
* Scrolling does not work in combo box
* Chromium does not work with all CSS minifiers such as
whitespace around a media query's `and` keyword
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=601
2014-01-16 21:04:19 +00:00
-------------------------------------------------------------------
Thu Jan 16 20:58:04 UTC 2014 - tittiatcoke@gmail.com
- Update to Chromium 32.0.1700.77
Stable channel update:
- Security fixes:
* CVE-2013-6646: Use-after-free in web workers
* CVE-2013-6641: Use-after-free related to forms
* CVE-2013-6643: Unprompted sync with an attacker’s
Google account
* CVE-2013-6645: Use-after-free related to speech input
elements
* CVE-2013-6644: Various fixes from internal audits, fuzzing
and other initiatives
- Other:
* Tab indicators for sound, webcam and casting
* Automatically blocking malware files
* Lots of under the hood changes for stability and performance
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=602
2014-01-16 21:19:01 +00:00
- Remove patch chromium-fix-chromedriver-build.diff as that
chromedriver is fixed upstream
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=601
2014-01-16 21:04:19 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=592
2013-12-05 11:43:00 +00:00
-------------------------------------------------------------------
Thu Dec 5 11:34:03 UTC 2013 - tittiatcoke@gmail.com
- Update to Chromium 31.0.1650.63
Stable channel update:
- Security fixes:
* CVE-2013-6634: Session fixation in sync related to 302 redirects
* CVE-2013-6635: Use-after-free in editing
* CVE-2013-6636: Address bar spoofing related to modal dialogs
* CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
* CVE-2013-6638: Buffer overflow in v8
* CVE-2013-6639: Out of bounds write in v8.
* CVE-2013-6640: Out of bounds read in v8
* and 12 other security fixes.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=599
2013-12-10 23:03:50 +00:00
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
This is based on missing build requires (valgrind, v8, etc)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=592
2013-12-05 11:43:00 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=588
2013-11-27 09:36:46 +00:00
-------------------------------------------------------------------
Wed Nov 27 09:36:08 UTC 2013 - tittiatcoke@gmail.com
- Remove the build flags to build according to the Chrome ffmpeg
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=589
2013-11-27 09:37:35 +00:00
branding and the proprietary codecs. (bnc#847971)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=588
2013-11-27 09:36:46 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=585
2013-11-16 08:52:06 +00:00
-------------------------------------------------------------------
Sat Nov 16 08:44:23 UTC 2013 - tittiatcoke@gmail.com
- Update to Chromium 31.0.1650.57
Stable channel update:
- Security Fixes:
* CVE-2013-6632: Multiple memory corruption issues.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=576
2013-11-07 11:19:59 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=579
2013-11-13 19:58:11 +00:00
Wed Nov 13 17:46:35 UTC 2013 - tittiatcoke@gmail.com
- Update to Chromium 31.0.1650.48
Stable Channel update:
- Security fixes:
* CVE-2013-6621: Use after free related to speech input elements..
* CVE-2013-6622: Use after free related to media elements.
* CVE-2013-6623: Out of bounds read in SVG.
* CVE-2013-6624: Use after free related to “id” attribute strings.
* CVE-2013-6625: Use after free in DOM ranges.
* CVE-2013-6626: Address bar spoofing related to interstitial warnings.
* CVE-2013-6627: Out of bounds read in HTTP parsing.
* CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
* CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
* CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
* CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
* CVE-2013-6631: Use after free in libjingle.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=581
2013-11-14 12:27:04 +00:00
- Added patch chromium-fix-chromedriver-build.diff to fix the
chromedriver build
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=579
2013-11-13 19:58:11 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=576
2013-11-07 11:19:59 +00:00
Thu Nov 7 11:18:07 UTC 2013 - tittiatcoke@gmail.com
- Enable ARM build for Chromium.
* Added patches chromium-arm-webrtc-fix.patch,
chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
to resolve ARM specific build issues
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=569
2013-10-19 17:05:30 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=572
2013-10-25 18:24:07 +00:00
Fri Oct 25 17:50:46 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=569
2013-10-19 17:05:30 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=572
2013-10-25 18:24:07 +00:00
- Update to Chromium 30.0.1599.114
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=574
2013-10-25 20:45:01 +00:00
Stable Channel update: fix build for 32bit systems
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=569
2013-10-19 17:05:30 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=574
2013-10-25 20:45:01 +00:00
- Drop patch chromium-fix-chromedriver-build.diff. This is now
fixed upstream
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=575
2013-11-03 17:35:46 +00:00
- For openSUSE versions lower than 13.1, build against the in-tree
libicu
New Update OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=567
2013-10-12 14:51:18 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=564
2013-10-04 06:07:49 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=572
2013-10-25 18:24:07 +00:00
Wed Oct 16 05:14:12 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=564
2013-10-04 06:07:49 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=572
2013-10-25 18:24:07 +00:00
- Update to Chromium 30.0.1599.101
- Security Fixes:
+ CVE-2013-2925: Use after free in XHR
+ CVE-2013-2926: Use after free in editing
+ CVE-2013-2927: Use after free in forms.
+ CVE-2013-2928: Various fixes from internal audits,
fuzzing and other initiatives.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=564
2013-10-04 06:07:49 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=572
2013-10-25 18:24:07 +00:00
-------------------------------------------------------------------
Tue Oct 1 20:48:13 UTC 2013 - tittiatcoke@gmail.com
- Update to Chromium 30.0.1599.66
- Easier searching by image
- A number of new apps/extension APIs
- Lots of under the hood changes for stability and performance
- Security fixes:
+ CVE-2013-2906: Races in Web Audio
+ CVE-2013-2907: Out of bounds read in Window.prototype object
+ CVE-2013-2908: Address bar spoofing related to the
“204 No Content” status code
+ CVE-2013-2909: Use after free in inline-block rendering
+ CVE-2013-2910: Use-after-free in Web Audio
+ CVE-2013-2911: Use-after-free in XSLT
+ CVE-2013-2912: Use-after-free in PPAPI
+ CVE-2013-2913: Use-after-free in XML document parsing
+ CVE-2013-2914: Use after free in the Windows color chooser
dialog
+ CVE-2013-2915: Address bar spoofing via a malformed scheme
+ CVE-2013-2916: Address bar spoofing related to the “204 No
Content” status code
+ CVE-2013-2917: Out of bounds read in Web Audio
+ CVE-2013-2918: Use-after-free in DOM
+ CVE-2013-2919: Memory corruption in V8
+ CVE-2013-2920: Out of bounds read in URL parsing
+ CVE-2013-2921: Use-after-free in resource loader
+ CVE-2013-2922: Use-after-free in template element
+ CVE-2013-2923: Various fixes from internal audits, fuzzing and
other initiatives
+ CVE-2013-2924: Use-after-free in ICU. Upstream bug
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=565
2013-10-04 13:30:39 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=559
2013-10-01 09:58:35 +00:00
-------------------------------------------------------------------
Tue Oct 1 09:57:35 UTC 2013 - tittiatcoke@gmail.com
- Add patch chromium-fix-altgrkeys.diff
- Make sure that AltGr is treated correctly (issue#296835)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=557
2013-09-27 22:23:15 +00:00
-------------------------------------------------------------------
Fri Sep 27 22:22:31 UTC 2013 - tittiatcoke@gmail.com
- Do not build with system libxml (bnc#825157)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=554
2013-09-25 18:46:00 +00:00
-------------------------------------------------------------------
Wed Sep 25 18:29:25 UTC 2013 - tittiatcoke@gmail.com
- Update to Chromium 31.0.1640.0
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=546
2013-09-23 22:57:12 +00:00
* Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=555
2013-09-27 10:51:26 +00:00
- Change the methodology for the Chromium packages. Build is
now based on an official tarball. As soon as the Beta channel
catches up with the current version, Chromium will be
based on the Beta channel instead of svn snapshots
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=471
2013-09-21 10:09:36 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=468
2013-09-15 11:21:38 +00:00
-------------------------------------------------------------------
Sun Sep 15 10:37:00 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1632
* Bug and Stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=470
2013-09-16 17:52:51 +00:00
- Added the flag --enable-threaded-compositing to the startup
script. This flag seems to be required when hardware acceleration
is in use. This prevents websites from locking up on users in
certain cases.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=468
2013-09-15 11:21:38 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=464
2013-09-02 13:54:22 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=466
2013-09-10 19:36:28 +00:00
Tue Sep 10 18:44:03 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1627
* Bug and Stability fixes
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=464
2013-09-02 13:54:22 +00:00
Mon Sep 2 13:39:12 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1619
* bug and Stability fixes
Accepting request 196484 from home:AndreasStieger:branches:network:chromium require mozilla-nss-devel >= 3.14 and mozilla-nspr-devel >= 4.10 update patch tagging for [bnc#836059] OBS-URL: https://build.opensuse.org/request/show/196484 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=461
2013-08-27 08:00:10 +00:00
-------------------------------------------------------------------
Mon Aug 26 20:57:18 UTC 2013 - andreas.stieger@gmx.de
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=464
2013-09-02 13:54:22 +00:00
- require mozilla-nss-devel >= 3.14 and mozilla-nspr-devel >= 4.9.5
Accepting request 196484 from home:AndreasStieger:branches:network:chromium require mozilla-nss-devel >= 3.14 and mozilla-nspr-devel >= 4.10 update patch tagging for [bnc#836059] OBS-URL: https://build.opensuse.org/request/show/196484 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=461
2013-08-27 08:00:10 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=460
2013-08-26 09:36:10 +00:00
-------------------------------------------------------------------
Mon Aug 26 09:35:02 UTC 2013 - tittiatcoke@gmail.com
- Add patch exclude_ymp.diff to ensure that 1-click-install files
are downloaded and NOT opened (bnc#836059)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=459
2013-08-25 09:06:12 +00:00
-------------------------------------------------------------------
Sun Aug 25 08:25:22 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1611
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=458
2013-08-18 16:44:08 +00:00
-------------------------------------------------------------------
Sun Aug 18 15:51:38 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1605
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=457
2013-08-16 13:14:27 +00:00
-------------------------------------------------------------------
Fri Aug 16 13:31:17 UTC 2013 - tittiatcoke@gmail.com
- Change the startup script so that Chromium will not start
when the chrome_sandbox doesn't have the SETUID.
(bnc#779448)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=454
2013-08-14 18:24:24 +00:00
-------------------------------------------------------------------
Wed Aug 14 17:31:17 UTC 2013 - tittiatcoke@gmail.com
- Update to 31.0.1601
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=447
2013-08-07 09:43:18 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=452
2013-08-11 09:20:16 +00:00
Sun Aug 11 08:40:31 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=447
2013-08-07 09:43:18 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=452
2013-08-11 09:20:16 +00:00
- Update to 30.0.1594
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=447
2013-08-07 09:43:18 +00:00
* Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=453
2013-08-11 15:24:14 +00:00
- Chromium now expects the SUID-helper installed in the same
directory as chromium. So let's create a symlink to the helper
in /usr/lib
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=443
2013-08-04 14:57:49 +00:00
-------------------------------------------------------------------
Sun Aug 4 14:11:58 UTC 2013 - tittiatcoke@gmail.com
- Update to 30.0.1587
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=445
2013-08-04 15:08:08 +00:00
- Remove patch chromium-nss-compliant.diff (Upstream)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=443
2013-08-04 14:57:49 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=435
2013-07-24 07:56:17 +00:00
-------------------------------------------------------------------
Wed Jul 24 04:57:36 UTC 2013 - tittiatcoke@gmail.com
- Update to 30.0.1575
* Bug and stability fixes
* Enable the gpu-sandbox again due to upstream fix (chromium#255063)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=432
2013-07-16 18:32:49 +00:00
-------------------------------------------------------------------
Tue Jul 16 17:55:57 UTC 2013 - tittiatcoke@gmail.com
- Update to 30.0.1567
* bug and Stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=429
2013-07-01 18:01:22 +00:00
-------------------------------------------------------------------
Mon Jul 1 17:02:52 UTC 2013 - tittiatcoke@gmail.com
- Update to 30.0.1553
* Bug and stability fixes
* Includes security update for v8 (bnc821601)
* CVE-2013-2838 Denial of service (out-of-bounds read) via
unspecified vectors
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=427
2013-06-28 07:48:05 +00:00
-------------------------------------------------------------------
Fri Jun 28 07:46:04 UTC 2013 - tittiatcoke@gmail.com
- Add the flag --disable-gpu-sandbox to prevent crashes and/or
slowness. The GPU Sandbox is a new sandbox introduces in M28 and
is currently causing issues
(http://code.google.com/p/chromium/issues/detail?id=255063)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=423
2013-06-23 13:32:34 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=426
2013-06-25 19:26:50 +00:00
Tue Jun 25 12:27:22 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=423
2013-06-23 13:32:34 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=426
2013-06-25 19:26:50 +00:00
- Update to 29.0.1548
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=423
2013-06-23 13:32:34 +00:00
* Bug and Stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=421
2013-06-16 16:17:36 +00:00
-------------------------------------------------------------------
Sun Jun 16 15:03:32 UTC 2013 - tittiatcoke@gmail.com
- Update to 29.0.1541
* Bug and Stability fixes
- Added patch chromium-nss-compatibility to fix build on Factory
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=418
2013-06-05 20:42:59 +00:00
-------------------------------------------------------------------
Wed Jun 5 20:24:08 UTC 2013 - tittiatcoke@gmail.com
- Update to 29.0.1530
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=421
2013-06-16 16:17:36 +00:00
* Bug and Stability fixes.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=418
2013-06-05 20:42:59 +00:00
- Dropped subversion buildrequire as svn is no longer used.
(Thanks to andreas.stieger@gmx.de)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=416
2013-05-27 16:45:06 +00:00
-------------------------------------------------------------------
Mon May 27 16:31:10 UTC 2013 - tittiatcoke@gmail.com
- Update to 29.0.1521
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=408
2013-05-20 08:55:26 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=414
2013-05-23 18:22:22 +00:00
Thu May 23 08:26:55 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=408
2013-05-20 08:55:26 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=414
2013-05-23 18:22:22 +00:00
- Update to 29.0.1517
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=408
2013-05-20 08:55:26 +00:00
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=402
2013-05-05 18:58:01 +00:00
-------------------------------------------------------------------
Sun May 5 18:43:49 UTC 2013 - tittiatcoke@gmail.com
- Update to 28.0.1500
* Bug and stability fixes
- Added patch adjust-ldflags-no-keep-memory.patch to change a
ldflags option to reduce the memory used during linking
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=401
2013-05-02 12:32:45 +00:00
-------------------------------------------------------------------
Thu May 2 11:43:10 UTC 2013 - tittiatcoke@gmail.com
- Update to 28.0.1497
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=400
2013-04-29 12:55:44 +00:00
-------------------------------------------------------------------
Mon Apr 29 12:20:19 UTC 2013 - tittiatcoke@gmail.com
- Update to 28.0.1494
* Bug and Stability Fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=392
2013-04-24 15:14:33 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=397
2013-04-27 21:21:48 +00:00
Sat Apr 27 21:34:51 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=392
2013-04-24 15:14:33 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=398
2013-04-28 16:23:32 +00:00
- Update to 28.0.1493
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=392
2013-04-24 15:14:33 +00:00
* bug and stability fixes
* Bring back the lost buildflag to enable proprietary codecs
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=389
2013-04-10 20:44:14 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=390
2013-04-14 14:00:50 +00:00
Sun Apr 14 13:46:39 UTC 2013 - tittiatcoke@gmail.com
- Update to 28.0.1479
* bug and stability fixes
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=389
2013-04-10 20:44:14 +00:00
Wed Apr 10 20:34:07 UTC 2013 - tittiatcoke@gmail.com
- use %config(noreplace) for /etc/default/chromium, so that user
changes are preserved.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=387
2013-04-06 19:21:56 +00:00
-------------------------------------------------------------------
Sat Apr 6 18:55:27 UTC 2013 - tittiatcoke@gmail.com
- Update to 28.0.1468
* Bug and stability fixes
Accepting request 161497 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/161497 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=384
2013-03-27 21:38:42 +00:00
-------------------------------------------------------------------
Sun Mar 24 12:56:12 UTC 2013 - tittiatcoke@gmail.com
- Update to 27.0.1452
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=385
2013-03-27 21:49:54 +00:00
- Change buoldsystem to ninja for additional speed
* Dropped patch chromium_use_gold.patch
- Removed obsolete 11.4 bits and pieces in the spec-file
* includes chromium.easy patch
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=378
2013-03-15 21:19:24 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=382
2013-03-19 17:27:14 +00:00
Tue Mar 19 16:51:59 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=378
2013-03-15 21:19:24 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=382
2013-03-19 17:27:14 +00:00
- Update to 27.0.1447
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=378
2013-03-15 21:19:24 +00:00
* Bug and stability fixes
* Drop patch chromium-norpath.patch. Rpath is only used when
building chromium with shared libraries.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=379
2013-03-16 08:05:35 +00:00
- Deactive building against system libraries. This is now causing
issues for building on 12.3 and Factory.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=378
2013-03-15 21:19:24 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=372
2013-03-09 14:26:03 +00:00
-------------------------------------------------------------------
Sat Mar 9 14:03:28 UTC 2013 - tittiatcoke@gmail.com
- Update to 27.0.1435
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=374
2013-03-09 15:08:13 +00:00
* Drop patch chromium-siginfo.patch due to upstream
inclusion
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=372
2013-03-09 14:26:03 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
-------------------------------------------------------------------
Sat Feb 23 08:09:58 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=370
2013-02-28 00:09:30 +00:00
- Update to 27.0.1425
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
* Bug and stability fixes:
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
- Fixed crash after clicking through malware warning.
(Issue: 173986)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
- Fixed broken command line to create extensions with locale info
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
(Issue: 176187)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
- Hosted apps in Chrome will always be opened from app launcher.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
(Issue: 176267)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
- Added modal confirmation dialog to the enterprise profile
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
sign-in flow. (Issue: 171236)
- Fixed a crash with autofill. (Issues: 175454, 176576)
- Fixed issues with sign-in.
(Issues: 175672, 175819, 175541, 176190)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
- Fixed spurious profile shortcuts created with a system-level
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
install. (Issue: 177047)
- Fixed the background tab flashing with certain themes.
(Issue: 175426)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
* Security Fixes: (bnc#804986)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=363
2013-02-23 09:01:42 +00:00
- High CVE-2013-0879: Memory corruption with web audio node
- High CVE-2013-0880: Use-after-free in database handling
- Medium CVE-2013-0881: Bad read in Matroska handling
- High CVE-2013-0882: Bad memory access with excessive SVG
parameters.
- Medium CVE-2013-0883: Bad read in Skia.
- Low CVE-2013-0884: Inappropriate load of NaCl.
- Medium CVE-2013-0885: Too many API permissions granted to web
store
- Medium CVE-2013-0886: Incorrect NaCl signal handling.
- Low CVE-2013-0887: Developer tools process has too many
permissions and places too much trust in the connected server
- Medium CVE-2013-0888: Out-of-bounds read in Skia
- Low CVE-2013-0889: Tighten user gesture check for dangerous
file downloads.
- High CVE-2013-0890: Memory safety issues across the IPC layer.
- High CVE-2013-0891: Integer overflow in blob handling.
- Medium CVE-2013-0892: Lower severity issues across the IPC layer
- Medium CVE-2013-0893: Race condition in media handling.
- High CVE-2013-0894: Buffer overflow in vorbis decoding.
- High CVE-2013-0895: Incorrect path handling in file copying.
- High CVE-2013-0896: Memory management issues in plug-in message
handling
- Low CVE-2013-0897: Off-by-one read in PDF
- High CVE-2013-0898: Use-after-free in URL handling
- Low CVE-2013-0899: Integer overflow in Opus handling
- Medium CVE-2013-0900: Race condition in ICU
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=365
2013-02-23 21:42:53 +00:00
* Make adjustment for autodetecting of the PepperFlash library.
The package with the PepperFlash hopefully will be soon
available through packman
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=359
2013-02-03 12:05:01 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=360
2013-02-12 20:39:46 +00:00
Tue Feb 12 20:12:25 UTC 2013 - tittiatcoke@gmail.com
- Update to 26.0.1411
* Bug and stability fixes
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=359
2013-02-03 12:05:01 +00:00
Sun Feb 3 11:41:13 UTC 2013 - tittiatcoke@gmail.com
- Update to 26.0.1403
* Bug and stability fixes
Accepting request 150016 from home:elvigia:branches:network:chromium - Using system libxml2 requires system libxslt. - Using system MESA does not work in i586 for some reason. - Also use system MESA, factory version seems adecuate now. - Always use system libxml2. - Restrict the usage of system libraries instead of the bundled ones to new products, too much hassle otherwise. - Also link kerberos and libgps directly, do not dlopen them. - Avoid using dlopen on system libraries, rpm or the package Manager do not handle this at all. tested for a few weeks and implemented with a macro so it can be easily disabled if problems arise. - Use SOME system libraries instead of the bundled ones, tested for several weeks and implemented with a macro for easy enable/Disable in case of trouble. OBS-URL: https://build.opensuse.org/request/show/150016 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=357
2013-01-27 09:26:35 +00:00
-------------------------------------------------------------------
Sat Jan 26 18:19:10 UTC 2013 - crrodriguez@opensuse.org
- Using system libxml2 requires system libxslt.
- Using system MESA does not work in i586 for some reason.
-------------------------------------------------------------------
Sat Jan 26 15:59:32 UTC 2013 - crrodriguez@opensuse.org
- Also use system MESA, factory version seems adecuate now.
- Always use system libxml2.
-------------------------------------------------------------------
Fri Jan 25 16:15:58 UTC 2013 - crrodriguez@opensuse.org
- Restrict the usage of system libraries instead of the bundled
ones to new products, too much hassle otherwise.
-------------------------------------------------------------------
Fri Jan 25 03:32:21 UTC 2013 - crrodriguez@opensuse.org
- Also link kerberos and libgps directly, do not dlopen them.
-------------------------------------------------------------------
Fri Jan 25 02:08:01 UTC 2013 - crrodriguez@opensuse.org
- Avoid using dlopen on system libraries, rpm or the package Manager
do not handle this at all. tested for a few weeks and implemented
with a macro so it can be easily disabled if problems arise.
- Use SOME system libraries instead of the bundled ones, tested for
several weeks and implemented with a macro for easy enable/Disable
in case of trouble.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=354
2013-01-19 15:26:11 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=356
2013-01-24 07:07:19 +00:00
Thu Jan 24 06:45:53 UTC 2013 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=354
2013-01-19 15:26:11 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=356
2013-01-24 07:07:19 +00:00
- Update to 26.0.1393
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=354
2013-01-19 15:26:11 +00:00
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=351
2013-01-13 19:02:16 +00:00
-------------------------------------------------------------------
Sun Jan 13 18:15:47 UTC 2013 - tittiatcoke@gmail.com
- Update to 26.0.1383
* Security fixes
- CVE-2012-5145: Use-after-free in SVG layout
- CVE-2012-5146: Same origin policy bypass with malformed URL
- CVE-2012-5147: Use-after-free in DOM handling
- CVE-2012-5148: Missing filename sanitization in hyphenation
support
- CVE-2012-5149: Integer overflow in audio IPC handling
- CVE-2012-5150: Use-after-free when seeking video
- CVE-2012-5152: Out-of-bounds read when seeking video
- CVE-2012-5153: Out-of-bounds stack access in v8.
- CVE-2012-5154: Integer overflow in shared memory allocation
- CVE-2013-0830: Missing NUL termination in IPC.
- CVE-2013-0831: Possible path traversal from extension process
- CVE-2013-0832: Use-after-free with printing.
- CVE-2013-0833: Out-of-bounds read with printing.
- CVE-2013-0834: Out-of-bounds read with glyph handling
- CVE-2013-0835: Browser crash with geolocation
- CVE-2013-0836: Crash in v8 garbage collection.
- CVE-2013-0837: Crash in extension tab handling.
- CVE-2013-0838: Tighten permissions on shared memory segments
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=346
2013-01-08 13:27:02 +00:00
-------------------------------------------------------------------
Tue Jan 8 13:19:57 UTC 2013 - tittiatcoke@gmail.com
* Set up Google API keys, see
http://www.chromium.org/developers/how-tos/api-keys .
# Note: these are for openSUSE Chromium builds ONLY!!
(Setup was done based on indication from Pawel Hajdan)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=344
2013-01-04 10:05:20 +00:00
-------------------------------------------------------------------
Fri Jan 4 09:08:32 UTC 2013 - tittiatcoke@gmail.com
- Update to 26.0.1375
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=340
2012-12-27 14:45:06 +00:00
-------------------------------------------------------------------
Thu Dec 27 14:43:46 UTC 2012 - tittiatcoke@gmail.com
- Change the default setting for password-store to basic.
(bnc#795860)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=339
2012-12-26 13:00:14 +00:00
-------------------------------------------------------------------
Wed Dec 26 12:36:13 UTC 2012 - tittiatcoke@gmail.com
- Update to 26.0.1371
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=337
2012-12-20 13:41:40 +00:00
-------------------------------------------------------------------
Thu Dec 20 13:25:14 UTC 2012 - tittiatcoke@gmail.com
- Update to 26.0.1367
* Bug and stability fixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=334
2012-12-14 14:02:58 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=335
2012-12-15 17:49:41 +00:00
Sat Dec 15 13:32:15 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=334
2012-12-14 14:02:58 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=335
2012-12-15 17:49:41 +00:00
- Update to 25.0.1362
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=334
2012-12-14 14:02:58 +00:00
* Security fixes (bnc#794075):
- CVE-2012-5139: Use-after-free with visibility events
- CVE-2012-5140: Use-after-free in URL loader
- CVE-2012-5141: Limit Chromoting client plug-in instantiation.
- CVE-2012-5142: Crash in history navigation.
- CVE-2012-5143: Integer overflow in PPAPI image buffers
- CVE-2012-5144: Stack corruption in AAC decoding
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=332
2012-12-06 10:40:07 +00:00
-------------------------------------------------------------------
Thu Dec 6 10:06:51 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1352
* Fixed garbled header and footer text in print preview.
[Issue: 152893]
* Fixed extension action badges with long text. [Issue: 160069]
* Disable find if constrained window is shown. [Issue: 156969]
* Enable fullscreen for apps windows. [Issue: 161246]
* Fixed broken profile with system-wide installation and
UserDataDir & DiskCacheDir policy. [Issue: 161336]
* Fixed stability crashes like 158747, 159437, 149139, 160914,
160401, 161858, 158747, 156878
* Fixed graphical corruption in Dust. [Issue: 155258]
* Fixed scrolling issue. [Issue: 163553]
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=330
2012-11-30 17:44:46 +00:00
-------------------------------------------------------------------
Fri Nov 30 17:15:39 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1343
* Security Fixes (bnc#791234 and bnc#792154):
- CVE-2012-5131: Corrupt rendering in the Apple OSX driver for
Intel GPUs
- CVE-2012-5133: Use-after-free in SVG filters.
- CVE-2012-5130: Out-of-bounds read in Skia
- CVE-2012-5132: Browser crash with chunked encoding
- CVE-2012-5134: Buffer underflow in libxml.
- CVE-2012-5135: Use-after-free with printing.
- CVE-2012-5136: Bad cast in input element handling.
- CVE-2012-5138: Incorrect file path handling
- CVE-2012-5137: Use-after-free in media source handling
- Correct build so that proprietary codecs can be used when
the chromium-ffmpeg package is installed
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=329
2012-11-25 12:55:50 +00:00
-------------------------------------------------------------------
Sun Nov 25 12:50:28 UTC 2012 - tittiatcoke@gmail.com
- Add a configuration file (/etc/default/chromium) where we can
indicate flags for the chromium-browser.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=328
2012-11-24 20:33:02 +00:00
-------------------------------------------------------------------
Sat Nov 24 20:00:51 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1335
* {gtk} Fixed <input> selection renders white text on white
background in apps. (Issue: 158422)
* Fixed translate infobar button to show selected language.
(Issue: 155350)
* Fixed broken Arabic language. (Issue: 158978)
* Fixed pre-rendering if the preference is disabled at start up.
(Issue: 159393)
* Fixed JavaScript rendering issue. (Issue: 159655)
* No further indications in the ChangeLog
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=305
2012-11-06 19:13:34 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=325
2012-11-20 23:34:14 +00:00
Tue Nov 20 23:27:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1329
* No further indications in the ChangeLog
- Removed patch chomium-ffmpeg-no-pkgconfig.patch
- Building now internal libffmpegsumo.so based on the standard
chromium ffmpeg codecs
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=305
2012-11-06 19:13:34 +00:00
Tue Nov 6 18:42:46 UTC 2012 - tittiatcoke@gmail.com
- Update to 25.0.1319
* No further indications in the Changelog
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=300
2012-10-26 09:20:21 +00:00
-------------------------------------------------------------------
Fri Oct 26 08:58:02 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1308
* Updated V8 - 3.14.5.0
* Bookmarks are now searched by their title while typing into
the omnibox with matching bookmarks being shown in the
autocomplete suggestions pop-down list. Matching is done by
prefix.
* Fixed chromium issues 155871, 154173, 155133.
Accepting request 138367 from home:coolo:branches:openSUSE:Factory - add explicit buildrequire on libbz2-devel OBS-URL: https://build.opensuse.org/request/show/138367 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=297
2012-10-16 13:15:09 +00:00
-------------------------------------------------------------------
Tue Oct 16 12:41:55 UTC 2012 - coolo@suse.com
- add explicit buildrequire on libbz2-devel
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=295
2012-10-07 11:59:50 +00:00
-------------------------------------------------------------------
Sun Oct 7 11:28:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1290
* No further indications in the ChangeLog.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=294
2012-09-30 10:04:44 +00:00
-------------------------------------------------------------------
Sun Sep 30 09:38:06 UTC 2012 - tittiatcoke@gmail.com
- Update to 24.0.1283
* Security Fixes (bnc#782257)
- High CVE-2012-2889: UXSS in frame handling
- High CVE-2012-2886: UXSS in v8 bindings.
- High CVE-2012-2881: DOM tree corruption with plug-ins.
- High CVE-2012-2876: Buffer overflow in SSE2 optimizations.
- High CVE-2012-2883: Out-of-bounds write in Skia.
- High CVE-2012-2887: Use-after-free in onclick handling.
- High CVE-2012-2888: Use-after-free in SVG text references.
- High CVE-2012-2894: Crash in graphics context handling.
- High CVE-2012-2896: Integer overflow in WebGL.
- Medium CVE-2012-2877: Browser crash with extensions
and modal dialogs
- Low CVE-2012-2879: DOM topology corruption.
- Medium CVE-2012-2884: Out-of-bounds read in Skia.
- High CVE-2012-2874: Out-of-bounds write in Skia.
- High CVE-2012-2878: Use-after-free in plug-in handling.
- Medium CVE-2012-2880: Race condition in plug-in paint buffer.
- High CVE-2012-2882: Wild pointer in OGG container handling.
- Medium CVE-2012-2885: Possible double free on exit.
- Low CVE-2012-2891: Address leak over IPC.
- Low CVE-2012-2892: Pop-up block bypass.
- High CVE-2012-2893: Double free in XSL transforms.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=287
2012-09-15 06:45:08 +00:00
-------------------------------------------------------------------
Sat Sep 15 06:27:56 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=290
2012-09-15 20:26:15 +00:00
- Update to 23.0.1268
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=287
2012-09-15 06:45:08 +00:00
* Updated V8 - 3.13.6.0
* Updated WebKit - 537.10
* Make the new sandbox more robust when denying socket calls.
* Fix crashes (Issues 142388 and 146606)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=285
2012-09-07 16:14:01 +00:00
-------------------------------------------------------------------
Fri Sep 7 15:49:57 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1259
* No further indications in the ChangeLog.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=281
2012-09-02 14:47:06 +00:00
-------------------------------------------------------------------
Sun Sep 2 14:31:22 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1255
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=282
2012-09-03 09:53:42 +00:00
* Security Fixes (bnc#778005):
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=281
2012-09-02 14:47:06 +00:00
- Medium CVE-2012-2865: Out-of-bounds read in line breaking.
- High CVE-2012-2866: Bad cast with run-ins.
- Low CVE-2012-2867: Browser crash with SPDY.
- Medium CVE-2012-2868: Race condition with workers and XHR.
- High CVE-2012-2869: Avoid stale buffer in URL loading.
- Low CVE-2012-2870: Lower severity memory management issues
in XPath.
- High CVE-2012-2871: Bad cast in XSL transforms.
- Medium CVE-2012-2872: XSS in SSL interstitial.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=274
2012-08-24 19:37:18 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=277
2012-08-29 18:48:47 +00:00
Wed Aug 29 19:19:31 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=274
2012-08-24 19:37:18 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=277
2012-08-29 18:48:47 +00:00
- Update to 23.0.1249
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=274
2012-08-24 19:37:18 +00:00
* No longer building with system libraries. This caused issues
with high CPU utilization and a blank homescreen. Now the
in-source libraries are used.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=249
2012-08-19 09:04:03 +00:00
-------------------------------------------------------------------
Sun Aug 19 08:32:45 UTC 2012 - tittiatcoke@gmail.com
- Update to 23.0.1240
* Duplex Printing defaults to Yes, which prints extra pages even
for a 1 page print out (Issue 138312).
* Print preview takes forever on Win XP (issue: 140044)
* Anti-DDoS inversion of logic (Issues: 141643, 141081)
* Projectmanager.com application causes Flash to hang
(Issue: 141018)
* An additional scroll bar appears at the right on many sites
(issue: 140239)
* Setting and unsetting display:none obliterates current scroll
position (issue: 140101)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=252
2012-08-19 10:38:31 +00:00
- Utilize the patched zlib sources from Chromium in order to build
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=249
2012-08-19 09:04:03 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=246
2012-08-03 16:11:12 +00:00
-------------------------------------------------------------------
Fri Aug 3 15:54:24 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1226
* Security Fixes (bnc#770821):
CVE-2012-2843: Use-after-free in layout height tracking
CVE-2012-2842: Use-after-free in counter handling
Accepting request 129328 from home:a_jaeger:FactoryFix Fix build with glibc 2.16 (struct siginfo is not exported anymore). OBS-URL: https://build.opensuse.org/request/show/129328 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=244
2012-07-30 16:46:57 +00:00
-------------------------------------------------------------------
Mon Jul 30 13:21:27 UTC 2012 - aj@suse.de
- Fix build with glibc 2.16 (struct siginfo is not exported anymore).
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=240
2012-07-29 13:45:32 +00:00
-------------------------------------------------------------------
Sun Jul 29 13:32:21 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1221
* Several crash fixes (Issues: 131310, 134574)
* Can't press Enter to save to PDF (Issue: 137690)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=230
2012-07-22 07:28:57 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=233
2012-07-25 14:53:12 +00:00
Wed Jul 25 14:17:53 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=230
2012-07-22 07:28:57 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=233
2012-07-25 14:53:12 +00:00
- Update to 22.0.1218
* New Connection Manager
* New Print UI.
* No further indications in the ChangeLog.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=230
2012-07-22 07:28:57 +00:00
Accepting request 127020 from home:k0da:ppc - exclude ppc and ppc64. There is no v8 for ppc OBS-URL: https://build.opensuse.org/request/show/127020 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=225
2012-07-06 12:17:47 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=227
2012-07-08 14:19:23 +00:00
Sun Jul 8 13:10:48 UTC 2012 - tittiatcoke@gmail.com
Accepting request 127020 from home:k0da:ppc - exclude ppc and ppc64. There is no v8 for ppc OBS-URL: https://build.opensuse.org/request/show/127020 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=225
2012-07-06 12:17:47 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=227
2012-07-08 14:19:23 +00:00
- Update to 22.0.1201
* No further indications in the ChangeLog.
- exclude ppc and ppc64. There is no v8 for ppc. (Update from
dvaleev@suse.com)
Accepting request 127020 from home:k0da:ppc - exclude ppc and ppc64. There is no v8 for ppc OBS-URL: https://build.opensuse.org/request/show/127020 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=225
2012-07-06 12:17:47 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=213
2012-06-24 13:10:38 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=221
2012-06-29 09:42:40 +00:00
Fri Jun 29 08:52:58 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=213
2012-06-24 13:10:38 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=221
2012-06-29 09:42:40 +00:00
- Update to 22.0.1190
* Security Fixes:
* CVE-2012-2815: Leak of iframe fragment id
* CVE-2012-2816: Prevent sandboxed processes interfering with
each other
* CVE-2012-2817: Use-after-free in table section handling
* CVE-2012-2818: Use-after-free in counter layout
* CVE-2012-2819: Crash in texture handling
* CVE-2012-2820: Out-of-bounds read in SVG filter handling
* CVE-2012-2821: Autofill display problem
* CVE-2012-2823: Use-after-free in SVG resource handling
* CVE-2012-2826: Out-of-bounds read in texture conversion
* CVE-2012-2829: Use-after-free in first-letter handling
* CVE-2012-2830: Wild pointer in array value setting
* CVE-2012-2831: Use-after-free in SVG reference handling
* CVE-2012-2834: Integer overflow in Matroska container
* CVE-2012-2825: Wild read in XSL handling
* CVE-2012-2807: Integer overflows in libxml
* Fix update-alternatives within the spec-file
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=213
2012-06-24 13:10:38 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=210
2012-06-21 13:08:54 +00:00
-------------------------------------------------------------------
Thu Jun 21 12:20:28 UTC 2012 - tittiatcoke@gmail.com
- Update to 22.0.1183
* Content settings for Cookies now also show protected storage
granted to hosted apps
* Chromoting client plugin correctly up-scales on when page-zoom
is >100%.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=200
2012-06-17 07:26:32 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=204
2012-06-19 13:32:33 +00:00
Tue Jun 19 13:06:52 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=200
2012-06-17 07:26:32 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=204
2012-06-19 13:32:33 +00:00
- Update to 21.0.1181
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=200
2012-06-17 07:26:32 +00:00
* Bugfixes.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=204
2012-06-19 13:32:33 +00:00
* Remove obsolete patch
* Do not execute update-alternatives when building
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=200
2012-06-17 07:26:32 +00:00
Accepting request 125171 from home:coolo:branches:openSUSE:Factory basically just the changelog to the hotfix I added to factory OBS-URL: https://build.opensuse.org/request/show/125171 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=199
2012-06-16 17:34:07 +00:00
-------------------------------------------------------------------
Fri Jun 15 12:19:24 UTC 2012 - coolo@suse.com
- fix update-alternative usage to fix build
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=189
2012-05-30 10:32:41 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=191
2012-05-31 10:03:06 +00:00
Thu May 31 08:27:09 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=189
2012-05-30 10:32:41 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=191
2012-05-31 10:03:06 +00:00
- Update to 21.0.1158
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=189
2012-05-30 10:32:41 +00:00
* Bugfixes
* Gamepad API prototype http://www.w3.org/TR/gamepad/
available by default.
* TLS 1.1 is enabled by default.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=184
2012-05-17 14:58:15 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=187
2012-05-20 17:25:45 +00:00
Sun May 20 16:40:03 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=184
2012-05-17 14:58:15 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=187
2012-05-20 17:25:45 +00:00
- Update to 21.0.1145
* Fixed several issues around audio not playing with videos
* Crash Fixes
* Improvements to trackpad on Cr-48
* Security Fixes (bnc#762481)
- CVE-2011-3083: Browser crash with video + FTP
- CVE-2011-3084: Load links from internal pages in their
own process.
- CVE-2011-3085: UI corruption with long autofilled values
- CVE-2011-3086: Use-after-free with style element.
- CVE-2011-3087: Incorrect window navigation
- CVE-2011-3088: Out-of-bounds read in hairline drawing
- CVE-2011-3089: Use-after-free in table handling.
- CVE-2011-3090: Race condition with workers.
- CVE-2011-3091: Use-after-free with indexed DB
- CVE-2011-3092: Invalid write in v8 regex
- CVE-2011-3093: Out-of-bounds read in glyph handling
- CVE-2011-3094: Out-of-bounds read in Tibetan handling
- CVE-2011-3095: Out-of-bounds write in OGG container.
- CVE-2011-3096: Use-after-free in GTK omnibox handling.
- CVE-2011-3098: Bad search path for Windows Media Player
plug-in
- CVE-2011-3100: Out-of-bounds read drawing dash paths.
- CVE-2011-3101: Work around Linux Nvidia driver bug
- CVE-2011-3102: Off-by-one out-of-bounds write in libxml.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=184
2012-05-17 14:58:15 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=180
2012-05-13 20:18:47 +00:00
-------------------------------------------------------------------
Sun May 13 19:53:59 UTC 2012 - tittiatcoke@gmail.com
- Update to 21.0.1137
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=182
2012-05-14 18:29:47 +00:00
* Fixes crashes when manually typing in URL's
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=180
2012-05-13 20:18:47 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=178
2012-05-11 14:53:57 +00:00
-------------------------------------------------------------------
Fri May 11 14:22:22 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=180
2012-05-13 20:18:47 +00:00
- Update to 21.0.1135.0
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=177
2012-05-09 13:03:10 +00:00
* Added patch for Sqlite which should resolve crashes when build
with GCC 4.7
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=179
2012-05-12 14:45:51 +00:00
* Fixes for rendering and stability
* Fixed about:inducebrowsercrashforrealz (Issue: 124843)
* Mouse over on apps/extensions makes place holder blank in
web store. (Issue: 125777)
* Security Fixes (bnc#760264):
- CVE-2011-3078: Use after free in floats handling.
- CVE-2012-1521: Use after free in xml parser.
- CVE-2011-3079: IPC validation failure.
- CVE-2011-3080: Race condition in sandbox IPC
- CVE-2011-3081: Use after free in floats handling.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=177
2012-05-09 13:03:10 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=172
2012-04-29 15:52:36 +00:00
-------------------------------------------------------------------
Sun Apr 29 15:38:00 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1123.0
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=171
2012-04-27 09:56:00 +00:00
-------------------------------------------------------------------
Fri Apr 27 09:54:43 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1119.0
Fixes
- Adjust spec-file to include two new resource files that are
required for the UI. (bnc#759381)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=166
2012-04-25 12:06:57 +00:00
-------------------------------------------------------------------
Wed Apr 25 11:32:07 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1116.0
* Fixes and update to newer v8 version
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=164
2012-04-19 09:15:10 +00:00
-------------------------------------------------------------------
Thu Apr 19 09:12:44 UTC 2012 - tittiatcoke@gmail.com
- Added the ChromeDriver as a separate package. Normal users
will not require this as it is a standalone server for testing
webbrowsers
Accepting request 113384 from home:fcrozat:branches:network:chromium - Use desktop_database macros at install time. OBS-URL: https://build.opensuse.org/request/show/113384 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=160
2012-04-13 16:37:20 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=161
2012-04-17 14:19:08 +00:00
Tue Apr 17 13:53:49 UTC 2012 - tittiatcoke@gmail.com
Accepting request 113384 from home:fcrozat:branches:network:chromium - Use desktop_database macros at install time. OBS-URL: https://build.opensuse.org/request/show/113384 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=160
2012-04-13 16:37:20 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=161
2012-04-17 14:19:08 +00:00
- Update to 20.0.1106.0
* Fixes issues with fonts (Issue: 108645).
* Enable the Chrome To Mobile page action for users with
compatible registered devices
* file: downloads allowed again
Accepting request 113384 from home:fcrozat:branches:network:chromium - Use desktop_database macros at install time. OBS-URL: https://build.opensuse.org/request/show/113384 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=160
2012-04-13 16:37:20 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=155
2012-04-08 12:17:20 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=161
2012-04-17 14:19:08 +00:00
Fri Apr 13 09:12:42 UTC 2012 - fcrozat@suse.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=155
2012-04-08 12:17:20 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=161
2012-04-17 14:19:08 +00:00
- Use desktop_database macros at install time.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=155
2012-04-08 12:17:20 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=152
2012-04-06 15:32:32 +00:00
-------------------------------------------------------------------
Fri Apr 6 14:32:07 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1094.0
Fixes:
* Other Devices menu shows last update time for other sessions,
and allows sessions to be hidden using a context menu.
* Fix sync issue with sessions (open tabs) triggering an
unrecoverable error.
* Fixed Sync/Apps: NTP apps icons missing after sync.
[Issue: 117857]
* Fixed bookmarks drag-n-drop in Bookmark Manager.
[Issue: 118715]
Security Fixes:
* Medium CVE-2011-3066: Out-of-bounds read in Skia clipping.
* Medium CVE-2011-3067: Cross-origin iframe replacement.
* High CVE-2011-3068: Use-after-free in run-in handling.
* High CVE-2011-3069: Use-after-free in line box handling.
* High CVE-2011-3070: Use-after-free in v8 bindings.
* High CVE-2011-3071: Use-after-free in HTMLMediaElement.
* Low CVE-2011-3072: Cross-origin violation parenting pop-up
window.
* High CVE-2011-3073: Use-after-free in SVG resource handling.
* Medium CVE-2011-3074: Use-after-free in media handling.
* High CVE-2011-3075: Use-after-free applying style command.
* High CVE-2011-3076: Use-after-free in focus handling.
* Medium CVE-2011-3077: Read-after-free in script bindings.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=151
2012-04-03 06:55:47 +00:00
-------------------------------------------------------------------
Tue Apr 3 06:51:49 UTC 2012 - tittiatcoke@gmail.com
- Update to 20.0.1090
Fixes:
* Fixed issue cannot add GMail app to Chrome. [Issue: 119975]
* Fixed theme and bookmarks bar notifications. [Issue: 117027]
* Fixed popup prompting permission for flash plugin.
[Issue: 120358]
Security Fixes:
* Medium CVE-2011-3058: Bad interaction possibly leading to
XSS in EUC-JP.
* Medium CVE-2011-3059: Out-of-bounds read in SVG text handling.
* Medium CVE-2011-3060: Out-of-bounds read in text fragment
handling.
* Medium CVE-2011-3061: SPDY proxy certificate checking error.
* High CVE-2011-3062: Off-by-one in OpenType Sanitizer.
* Low CVE-2011-3063: Validate navigation requests from the
renderer more carefully.
* High CVE-2011-3064: Use-after-free in SVG clipping.
* High CVE-2011-3065: Memory corruption in Skia.
* Medium CVE-2011-3057: Invalid read in v8.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=147
2012-03-24 07:20:58 +00:00
-------------------------------------------------------------------
Sat Mar 24 06:40:10 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1079
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=148
2012-03-28 16:41:01 +00:00
Security Fixes (bnc#754456):
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=147
2012-03-24 07:20:58 +00:00
* High CVE-2011-3050: Use-after-free with first-letter handling
* High CVE-2011-3045: libpng integer issue from upstream
* High CVE-2011-3051: Use-after-free in CSS cross-fade handling
* High CVE-2011-3052: Memory corruption in WebGL canvas handling
* High CVE-2011-3053: Use-after-free in block splitting
* Low CVE-2011-3054: Apply additional isolations to webui
privileges
* Low CVE-2011-3055: Prompt in the browser native UI for unpacked
extension installation
* High CVE-2011-3056: Cross-origin violation with “magic iframe”.
* Low CVE-2011-3049: Extension web request API can interfere with
system requests
Other Fixes:
* The short-cut key for caps lock (Shift + Search) is disabled
when an accessibility screen reader is enabled
* Fixes an issue with files not being displayed in File Manager
when some file names contain UTF-8 characters (generally
accented characters)
* Fixed dialog boxes in settings. (Issue: 118031)
* Fixed flash videos turning white on mac when running with
--disable-composited-core-animation-plugins (Issue: 117916)
* Change to look for correctly sized favicon when multiple images
are provided. (Issue: 118275)
* Fixed issues - 116044, 117470, 117068, 117668, 118620
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=146
2012-03-21 12:54:45 +00:00
-------------------------------------------------------------------
Wed Mar 21 12:36:42 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1077
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=138
2012-03-18 08:31:48 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=143
2012-03-18 17:44:44 +00:00
Sun Mar 18 17:35:02 UTC 2012 - tittiatcoke@gmail.com
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=138
2012-03-18 08:31:48 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=143
2012-03-18 17:44:44 +00:00
- Update to 19.0.1074
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=140
2012-03-18 08:36:44 +00:00
- Build Chromium on openSUSE > 12.1 with the gold linker
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=143
2012-03-18 17:44:44 +00:00
- Fix build issues with GCC 4.7
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=138
2012-03-18 08:31:48 +00:00
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=132
2012-03-15 12:58:50 +00:00
-------------------------------------------------------------------
Thu Mar 15 12:51:21 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1071
* Several fixes and improvements in the new Settings, Extensions,
and Help pages.
* Fixed the flashing when switched between composited and
non-composited mode. [Issue: 116603]
* Fixed stability issues 116913, 117217, 117347, 117081
Accepting request 108781 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/108781 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=129
2012-03-11 14:42:25 +00:00
-------------------------------------------------------------------
Sun Mar 11 08:01:15 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1066
* Fixed Chrome install/update resets Google search preferences
(Issue: 105390)
* Don't trigger accelerated compositing on 3D CSS when using
swiftshader (Issue: 116401)
* Fixed a GPU crash (Issue: 116096)
* More fixes for Back button frequently hangs (Issue: 93427)
* Bastion now works (Issue: 116285)
* Fixed Composited layer sorting irregularity with accelerated
canvas (Issue: 102943)
* Fixed Composited layer sorting irregularity with accelerated
canvas (Issue: 102943)
* Fixed Google Feedback causes render process to use too much
memory (Issue: 114489)
* Fixed after upgrade, some pages are rendered as blank
(Issue: 109888)
* Fixed Pasting text into a single-line text field shouldn't
keep literal newlines (Issue: 106551)
- Security Fixes:
* Critical CVE-2011-3047: Errant plug-in load and GPU process
memory corruption
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=130
2012-03-12 10:07:58 +00:00
* Critical CVE-2011-3046: UXSS and bad history navigation.
Accepting request 108781 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/108781 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=129
2012-03-11 14:42:25 +00:00
Accepting request 108127 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/108127 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=126
2012-03-06 09:34:34 +00:00
-------------------------------------------------------------------
Mon Mar 5 20:53:06 UTC 2012 - vdziewiecki@suse.com
- add Provides: browser(npapi) FATE#313084
-------------------------------------------------------------------
Sat Mar 3 16:55:15 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1060
* Fixed NTP signed in state is missing (Issue: 112676)
* Fixed gmail seems to redraw itself (all white) occasionally
(Issue: 111263)
* Focus "OK" button on Javascript dialogs (Issue: 111015)
* Fixed Back button frequently hangs (Issue: 93427)
* Increase the buffer size to fix muted playback rate
(Issue: 108239)
* Fixed Empty span with line-height renders with non-zero height
(Issue: 109811)
* Marked the Certum Trusted Network CA as an issuer of
extended-validation (EV) certificates.
* Fixed importing of bookmarks, history, etc. from Firefox 10+.
* Fixed issues - 114001, 110785, 114168, 114598, 111663, 113636,
112676
* Fixed several crashes (Issues: 111376, 108688, 114391)
* Fixed Firefox browser in Import Bookmarks and Settings
drop-down (Issue: 114476)
* Sync: Sessions aren't associating pre-existing tabs
(Issue: 113319)
* Fixed All "Extensions" make an entry under the "NTP Apps"
page (Issue: 113672)
+ Security Fixes (bnc#750407):
* High CVE-2011-3031: Use-after-free in v8 element wrapper.
* High CVE-2011-3032: Use-after-free in SVG value handling.
* High CVE-2011-3033: Buffer overflow in the Skia drawing library.
* High CVE-2011-3034: Use-after-free in SVG document handling.
* High CVE-2011-3035: Use-after-free in SVG use handling.
* High CVE-2011-3036: Bad cast in line box handling.
* High CVE-2011-3037: Bad casts in anonymous block splitting.
* High CVE-2011-3038: Use-after-free in multi-column handling.
* High CVE-2011-3039: Use-after-free in quote handling.
* High CVE-2011-3040: Out-of-bounds read in text handling.
* High CVE-2011-3041: Use-after-free in class attribute handling.
* High CVE-2011-3042: Use-after-free in table section handling.
* High CVE-2011-3043: Use-after-free in flexbox with floats.
* High CVE-2011-3044: Use-after-free with SVG animation elements.
- Remove the external ffmepg headers and start using the ones
delivered with Chromium. Changes to Chromium are no longer in line
with any ffmpeg version :-(. So we can only use the Chromium
ffmpeg headers.
Accepting request 106077 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/106077 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=113
2012-02-20 14:44:25 +00:00
-------------------------------------------------------------------
Mon Feb 20 14:39:23 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1046
* Security updates
+ CVE-2011-3015: Integer overflows in PDF codecs.
+ CVE-2011-3016: Read-after-free with counter nodes.
+ CVE-2011-3017: Possible use-after-free in database handling.
+ CVE-2011-3018: Heap overflow in path rendering.
+ CVE-2011-3019: Heap buffer overflow in MKV handling.
+ CVE-2011-3020: Native client validator error.
+ CVE-2011-3021: Use-after-free in subframe loading.
+ CVE-2011-3022: Inappropriate use of http for translation script.
+ CVE-2011-3023: Use-after-free with drag and drop.
+ CVE-2011-3024: Browser crash with empty x509 certificate.
+ CVE-2011-3025: Out-of-bounds read in h.264 parsing.
+ CVE-2011-3026: Integer overflow / truncation in libpng.
+ CVE-2011-3027: Bad cast in column handling.
Accepting request 105056 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/105056 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=112
2012-02-15 07:49:38 +00:00
-------------------------------------------------------------------
Wed Feb 15 07:40:59 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1042
* Make speech input bubble borders close with the bubble
[Issue: 112194]
* Fixed stability issues
[Issues: 113531, 113492, 113654, 113546, 113847, 114011]
* Use Google’s online spellchecker to identify misspelled words
as well as provide suggestions, for pasted text only.
* Fix: open incognito windows at exit created extra normal
windows when the session was restored
* When translating a page, get the code and translation via HTTPS
Accepting request 103692 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/103692 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=110
2012-02-10 05:45:26 +00:00
-------------------------------------------------------------------
Fri Feb 10 05:36:56 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1037
* Fix crashing timing bug where panel animates after its closed
(issue#111120)
* Remove patch to build with newer glib version. This was merged
upstream
* Added option to disable building with gold for x86_64. Used
linker option "--icf=none" is not supported yet.
Accepting request 102950 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/102950 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=107
2012-02-06 23:02:14 +00:00
-------------------------------------------------------------------
Mon Feb 6 10:45:25 UTC 2012 - tittiatcoke@gmail.com
- Update to 19.0.1031
* Block plugins for platform apps
To block plugins a new content settings has been added, with
the highest priority (i.e. at the front of the list). This
could be used down the track to hang off more platform app
specific stuff.
* Remove unconditional -msse3 -mssse3 CFLAGS from media.gyp
(issue#107532)
* Refactoring of Settings page
* Other bugfixes
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=108
2012-02-08 09:35:27 +00:00
* Security Fixes:
CVE-2011-3953: Avoid clipboard monitoring after paste event.
CVE-2011-3954: Crash with excessive database usage.
CVE-2011-3955: Crash aborting an IndexDB transaction
CVE-2011-3956: Incorrect handling of sandboxed origins inside
extensions
CVE-2011-3957: Use-after-free in PDF garbage collection
CVE-2011-3958: Bad casts with column spans
CVE-2011-3959: Buffer overflow in locale handling
CVE-2011-3960: Out-of-bounds read in audio decoding
CVE-2011-3961: Race condition after crash of utility process
CVE-2011-3962: Out-of-bounds read in path clipping
CVE-2011-3963: Out-of-bounds read in PDF fax image handling
CVE-2011-3964: URL bar confusion after drag + drop
CVE-2011-3965: Crash in signature check
CVE-2011-3966: Use-after-free in stylesheet error handling
CVE-2011-3967: Crash with unusual certificate.
CVE-2011-3968: Use-after-free in CSS handling
CVE-2011-3969: Use-after-free in SVG layout.
CVE-2011-3970: Out-of-bounds read in libxslt
CVE-2011-3971: Use-after-free with mousemove events
CVE-2011-3972: Out-of-bounds read in shader translator
Accepting request 101617 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/101617 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=102
2012-01-26 08:17:54 +00:00
-------------------------------------------------------------------
Accepting request 102111 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/102111 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=105
2012-01-30 21:11:21 +00:00
Sun Jan 29 21:11:37 UTC 2012 - tittiatcoke@gmail.com
Accepting request 101617 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/101617 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=102
2012-01-26 08:17:54 +00:00
Accepting request 102111 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/102111 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=105
2012-01-30 21:11:21 +00:00
- Update to 18.0.1022
Accepting request 101617 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/101617 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=102
2012-01-26 08:17:54 +00:00
* Security fixes (bnc#743319)
+ CVE-2011-3924 Use-after-free vulnerability
+ CVE-2011-3925 Use-after-free vulnerability
+ CVE-2011-3926 Heap-based buffer overflow in the tree builder
+ CVE-2011-3927 Skia does not perform all required
initialization of values
+ CVE-2011-3928 Use-after-free vulnerability
* Compile the chrome_sandbox binary with -fPIE flags
-------------------------------------------------------------------
Mon Jan 23 09:44:42 UTC 2012 - tittiatcoke@gmail.com
- Update to 18.0.1017
* Security Issues fixed (bnc#740493)
+ CVE-2011-3921 Use-after-free in animation frames
+ CVE-2011-3919 Heap-buffer-overflow in libxml
+ CVE-2011-3922 Stack-buffer-overflow in glyph handling
Accepting request 98487 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/98487 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=101
2011-12-31 22:37:40 +00:00
-------------------------------------------------------------------
Sat Dec 31 22:29:20 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.992
* Delay some extension startup until after first run import.
(issue 108286)
* Add function support for Sleep with TimeDelta input.
(issue 108171)
* Make webstore installs work when the Downloads folder is missing.
(issue 108812)
* Disable GL_EXT_texture_storage support in Linux. (issue 107782)
Accepting request 98371 from home:tittiatcoke:branches:network:chromium Update to newer version OBS-URL: https://build.opensuse.org/request/show/98371 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=99
2011-12-28 12:13:39 +00:00
-------------------------------------------------------------------
Wed Dec 28 12:00:11 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.985
+ Webkit layout:
* Suppress a leak in http/tests/appcache/reload.html
(issue 108621)
* Suppress a leak in xmlhttprequest/workers/referer.html
(issue 108622)
* Extend the suppression for uninit value in
fast/forms/input-text-paste-maxlength.html (issue 106183)
* Suppress memory leaks in
fast/files/workers/worker-read-blob-async.html
(issue 108624)
* Suppress a leak in
websocket/tests/hybi/workers/receive-arraybuffer.html
(issue 108627)
* Suppress a leak in
http/tests/xmlhttprequest/workers/methods-async.html
(issue 108628)
+ Set opaque on the WebMediaPlayerClient based on the decoder
Accepting request 96985 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/96985 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=96
2011-12-19 06:49:05 +00:00
-------------------------------------------------------------------
Mon Dec 19 06:41:16 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.975
+ Updating extensions code to use UTF16. (issue#71980)
+ Assign F5 to cycle forward (issue#107417)
+ [Sync] Add NOTREACHED for empty passphrase (issue#104189)
+ Add libudev as build-dependency (issue#79050)
+ Enable mnemonic and bookmark folder key activation on menu
(issue#107869)
- Removed conflict with xine-browser-plugins.
Accepting request 96668 from home:tittiatcoke:branches:network:chromium Update to 18.0.972 OBS-URL: https://build.opensuse.org/request/show/96668 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=91
2011-12-14 16:48:57 +00:00
-------------------------------------------------------------------
Wed Dec 14 10:25:20 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.972
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=95
2011-12-15 15:33:39 +00:00
* Security issues fixed: (bnc#736716)
Accepting request 96668 from home:tittiatcoke:branches:network:chromium Update to 18.0.972 OBS-URL: https://build.opensuse.org/request/show/96668 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=91
2011-12-14 16:48:57 +00:00
+ CVE-2011-3903: Out-of-bounds read in regex matching.
+ CVE-2011-3905: Out-of-bounds reads in libxml.
+ CVE-2011-3906: Out-of-bounds read in PDF parser.
+ CVE-2011-3907: URL bar spoofing with view-source.
+ CVE-2011-3908: Out-of-bounds read in SVG parsing.
+ CVE-2011-3909: [64-bit only] Memory corruption in CSS
property array.
+ CVE-2011-3910: Out-of-bounds read in YUV video frame
handling.
+ CVE-2011-3911: Out-of-bounds read in PDF.
+ CVE-2011-3912: Use-after-free in SVG filters.
+ CVE-2011-3914: Out-of-bounds write in v8 i18n handling
+ CVE-2011-3915: Buffer overflow in PDF font handling.
+ CVE-2011-3916: Out-of-bounds reads in PDF cross references.
+ CVE-2011-3917: Stack-buffer-overflow in FileWatcher.
+ CVE-2011-3904: Use-after-free in bidi handling.
* No longer build against the system libjpeg, but build against
the libjpeg that comes with Chromium to prevent graphics
issues
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=94
2011-12-15 10:03:52 +00:00
* Chromium for openSUSE:Factory now builds against libjpeg8
* Removed explicit -fPIC from the C-flags
Accepting request 96668 from home:tittiatcoke:branches:network:chromium Update to 18.0.972 OBS-URL: https://build.opensuse.org/request/show/96668 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=91
2011-12-14 16:48:57 +00:00
Accepting request 94700 from home:namtrac:bugfix - Support ISO_8859-X as an alias to ISO-8859-X OBS-URL: https://build.opensuse.org/request/show/94700 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=87
2011-12-01 12:23:55 +00:00
-------------------------------------------------------------------
Accepting request 96250 from home:tittiatcoke:branches:network:chromium Update to 18.0.968 OBS-URL: https://build.opensuse.org/request/show/96250 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=88
2011-12-10 18:59:34 +00:00
Sat Dec 10 18:51:39 UTC 2011 - tittiatcoke@gmail.com
- Update to 18.0.968
+ Print preview: Disable the right context menu items in print
preview. (issue#106876,#106915)
+ Fix page zoom for plug-in documents (PDF, etc.)
(issue#106013,#106228)
+ ntp: track number of times a user switches pages in a single
session (issue#106575)
+ <video> decode in hardware! (issue#104579)
+ New tab button icons (issue#100775)
+ Profile/user menu on NTP should look more clickable?
(issue#102685)
- Enable the build of the Native Client (NaCl)
-------------------------------------------------------------------
Accepting request 94700 from home:namtrac:bugfix - Support ISO_8859-X as an alias to ISO-8859-X OBS-URL: https://build.opensuse.org/request/show/94700 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=87
2011-12-01 12:23:55 +00:00
Thu Dec 1 12:11:40 UTC 2011 - idoenmez@suse.de
- Support ISO_8859-X as an alias to ISO-8859-X
Accepting request 93890 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/93890 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=86
2011-11-27 19:36:13 +00:00
-------------------------------------------------------------------
Sun Nov 27 09:50:23 UTC 2011 - tittiatcoke@gmail.com
- Update to 17.0.952
+ Message receiver on browser side that holds/starts the gamepad
data provider (issue#79050)
+ WebSocket Pepper API: in process API implementation
(issue#87310)
+ Clean up plug-in placeholders (issue#62079)
+ Schedule idle handler in the foreground tab based on CPU usage
and user activity
-------------------------------------------------------------------
Sun Nov 27 08:51:17 UTC 2011 - tittiatcoke@gmail.com
- Remove the media-probe.patch. This has one regression and that
video's are no longer played through chromium if the
chromium-ffmpeg package from packman is not installed. However
removing this patch enabled support for all video formats if
the chromium-ffmpeg package has been installed.
Accepting request 92726 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/92726 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=84
2011-11-20 12:33:47 +00:00
-------------------------------------------------------------------
Sun Nov 20 12:27:43 UTC 2011 - tittiatcoke@gmail.com
- Update to 17.0.945
+ Defer construction of NotificationUIManager to fix notification
initialization. (bug#103427)
+ Ignore button mouse enter for new tab button (bug#104326)
+ History/Downloads:
- Adding button and checkbox css to history and downloads.
- Tweaked checkbox styles for history.
-------------------------------------------------------------------
Sun Nov 13 09:35:03 UTC 2011 - tittiatcoke@gmail.com
- Update to 17.0.937
+ Make it so that turning off sync for extensions in the
preferences UI also turns off sync for extension settings,
ditto for apps and app settings (bug#98488)
+ Cleanup: Remove unneeded forward declarations from
chrome/browser/ui/webui.
+ fix appearance of buttons in chrome://settings
+ Report correct error when connection cannot be established
(bug#103937)
+ Temporarily disables XI2 for aura until events are straightened
out. (bug#103981)
+ Make chrome communicate with gpsd through libgps/shared memory
(bug#103751)
+ Don't close tabs from crashed extensions with background pages.
Make the crashed extension reload when the sad tab is reloaded.
(bug#71629,bug#94177)
Accepting request 89760 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/89760 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=81
2011-10-30 08:21:07 +00:00
-------------------------------------------------------------------
Sun Oct 30 08:10:13 UTC 2011 - tittiatcoke@gmail.com
- Update to 17.0.922
+ Use the new ChromeV8ContextSet in
ExtensionProcessBindings::StartRequestCommon()
+ Suppress failure for downloads.DownloadsTest.testPauseAndResume,
as it is failing sporadically on pyauto win vista, and cause
is not understood. (bug#102228)
+ Fix a crash in FullscreenExitBubbleController when the user
clicks the "Exit full screen" button. (bug#101835)
+ Close all panels originated by the extension when extension
unloads. (bug#101118)
+ Fix history importing by delaying DownloadManager creation.
(bug#98966)
+ aura: Draw persistent borders around browser windows.
(bug#101977)
+ aura: brightness and volume bubble (bug#98322)
+ Associate the instant label text with a specific checkbox.
(bug#101930)
+ GTK: More profiling of the rendering path. (bug#100803)
+ Convert the non-debug logging in chrome/common to debug logging.
+ Add code to prompt for browser login during app notification
setup (bug#98145)
+ GTK: Constrain the clip area on tabstrip draws. (bug#100803)
+ Fully enable about:tracking by default (controlled by the
flag: "--enable-tracking" and the default is always on.)
Accepting request 89110 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/89110 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=80
2011-10-24 05:33:31 +00:00
-------------------------------------------------------------------
Sun Oct 23 07:17:06 UTC 2011 - tittiatcoke@gmail.com
- Update to 17.0.917
+ Convert the Flash interfaces to no longer use GetInfo
+ Now does not sync URLs that only have imported visits
+ Print Preview fixes
+ Use WebCompositor only when --enable-threaded-compositing
+ Enable privileged WebGL extensions for Chrome extensions.
+ Implement sync data type controller and UI for syncing
notifications:
+ Improve audio underflow handling.
+ Improve extension settings accessibility.
+ Other bugfixes
Accepting request 89760 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/89760 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=81
2011-10-30 08:21:07 +00:00
- Remove patch19 for system zlib adjustments as this is no longer
required
Accepting request 89110 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/89110 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=80
2011-10-24 05:33:31 +00:00
Accepting request 88068 from home:tittiatcoke:branches:network:chromium Update OBS-URL: https://build.opensuse.org/request/show/88068 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=78
2011-10-16 11:36:16 +00:00
-------------------------------------------------------------------
Sun Oct 16 11:21:52 UTC 2011 - tittiatcoke@gmail.com
- Update to 16.0.910
+ Delay network requests on startup if any webRequest or
webNavigation extensions are enabled.
+ Make escape exit tabbed fullscreen mode even if browser was in
fullscreen mode before. (bug#89208)
+ [Sync] Support open tabs experiment enabling before sync setup
completion. (bug#99403)
+ On Linux, turn off panels when there is no window manager
present. (bug#100381)
+ Linux: add the "other bookmarks" folder to the new bookmark
menu. (bug#81263)
+ Add google search app to list of apps installed by default.
(bug#94920)
+ PrintPreview: Added code to honor the grayscale color model
+ Linux: add basic bookmark menu support. More features can be
added later. Currently, only supports ctrl-click/middle click
to open in a new tab. It's supposed to be quite fancy and
support context menus and maybe other gestures as well; these
are not yet supported. (bug#81263)
Accepting request 87180 from home:tittiatcoke:branches:network:chromium Update to 16.0.904 OBS-URL: https://build.opensuse.org/request/show/87180 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=76
2011-10-09 16:27:17 +00:00
-------------------------------------------------------------------
Sun Oct 9 06:57:29 UTC 2011 - tittiatcoke@gmail.com
- Update to 16.0.904
+ aura: Implement cursor support on linux
+ Add --enable-video-track commandline flag for enabling <track>
(otherwise disabled by default)
+ [Sync UI] When signed in, choosing the sync wrench menu item
should navigate to personal options
+ Fix UI quirks when doing a history navigation to a slow page
(bug#94747)
+ Auto-login UI polish. (bug#98873)
+ Fixed the gtk menu race (bug#88473)
Accepting request 85906 from home:tittiatcoke:branches:network:chromium Update chromium OBS-URL: https://build.opensuse.org/request/show/85906 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=74
2011-10-02 07:52:00 +00:00
-------------------------------------------------------------------
Sun Oct 2 07:37:15 UTC 2011 - tittiatcoke@gmail.com
- Updaet to 16.0.898
+ Move webNavigation out of experimental (bug#60100)
+ Rework BrightnessLibrary using DBusThreadManager
+ Remove google search experiment
+ Only allow to lock the mouse when the tab is in fullscreen mode
(bug#41781)
+ Expose connection error code to the web app (bug#91402)
+ Make the license tools recoginze the dual license (bug#98116)
+ Don't immediately fill saved passwords in Incognito mode
+ Ensure that --disable-extensions disables extension prefs from
being enacted
+ Removing mfplayer and mfdecoder tools
Accepting request 84745 from home:tittiatcoke:branches:network:chromium Update to a newer version OBS-URL: https://build.opensuse.org/request/show/84745 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=69
2011-09-25 17:30:54 +00:00
-------------------------------------------------------------------
Sun Sep 25 09:00:41 UTC 2011 - tittiatcoke@gmail.com
- Make "Set as default browser" work
- Update to 16.0.891
+ Prefer curl over wget on linux if installed.
+ Printing: Fix Linux print dialog code when there are no
printers installed.
+ Do not intitialize V8 in browser process.
+ Suppress race in URLRequestHttpJob/HttpNetworkTransaction
+ Profile shouldn't own PersonalDataManager
+ Remove the old chrome://extensions page, since the URL now
redirects to the new Settings page.
+ fix disappearing bookmark star on linux/gtk
+ Fix display of "Last Synced as..." in Personal Stuff.
+ FTP: fixed compatibility with servers which send 451 response
for CWD command.
- add versions to some dependencies of subpackages OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=58
2011-09-22 09:54:33 +00:00
-------------------------------------------------------------------
Thu Sep 22 09:53:18 UTC 2011 - prusnak@opensuse.org
- add versions to some dependencies of subpackages
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=50
2011-09-20 16:17:34 +00:00
-------------------------------------------------------------------
Tue Sep 20 16:14:30 UTC 2011 - tittiatcoke@gmail.com
- Added permissions-patch so that the suid-helper will also work
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=56
2011-09-21 13:50:46 +00:00
on distro versions equal to 11.4.
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=50
2011-09-20 16:17:34 +00:00
- Moved the no-sandbox check to the browser start-up script so that
the enabling of the sandbox is done at runtime (bnc#718016)
OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=48
2011-09-20 16:10:49 +00:00
-------------------------------------------------------------------
Wed Sep 14 11:30:06 UTC 2011 - tittiatcoke@gmail.com
- Update to 16.0.880
+ Print preview issues with self-closing popups have been fixed
+ Fixed many known stability issues.
+ Change chrome://crash (sad tab page) "Learn more" link to:
"If you're seeing this frequently, try these suggestions."
Link "these suggestions" to the "Learn more" help article.
+ Convert chrome://extensions to a settings page within the
options pages.
+ Beginnings of basic Focus and Key Events.
+ various bugfixes
-------------------------------------------------------------------
Sun Sep 3 17:39:50 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.870
+ Fix the print preview regression bug
+ Enable low-latency audio by default
+ Add Indic IME support
+ Switch the native print path on Linux and ChromeOS to use Skia
instead of Cairo
+ Use 16x16 icons so they don't stretch
+ Turn client-side phishing detection on for non-UMA users
+ Fix a crash on Linux which occurs during drag drop operations
in the renderer
+ various bugfixes
-------------------------------------------------------------------
Wed Aug 24 17:53:51 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.862
+ Fix pyauto autofill flakiness when submitting profile info via
webpage forms (issues: 90232,89784)
+ Get rid of static TabContentsView::Create function since the
interface is in content, but the implementations are in chrome.
(issue: 76697)
+ Suppress another race with KURLGooglePrivate + Workers.
(issue 93708)
+ Add a new content settings type AUTO-SELECT-CERTIFICATE. The
default value of the new content settings type AUTO-SELECT-CERTIFICATE
is CONTENT_SETTING_ASK
+ Add a policy for whitelisting origins for which client certificates
should be auto selected.
+ Add a policy to set a default setting for the auto select certificates
setting.
-------------------------------------------------------------------
Mon Aug 22 16:32:16 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.860
-------------------------------------------------------------------
Sat Aug 20 20:47:53 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.859
-------------------------------------------------------------------
Fri Aug 19 05:55:51 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.857
+ Issue with the close tab button is fixed.
-------------------------------------------------------------------
Tue Aug 16 09:14:32 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.854
- Enable build of sandbox client as that this is now mandatory
-------------------------------------------------------------------
Sun Aug 7 09:13:32 UTC 2011 - tittiatcoke@gmail.com
- Introduce an option to switch the password store for Chromium in
a more friendlier way, by using the update-alternatives. The user
has now the option to install a new package (chromium-desktop-kde
or chromium-desktop-gnome) and based on this the respective
password store is selected.
-------------------------------------------------------------------
Sat Aug 6 10:09:02 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.846
-------------------------------------------------------------------
Sat Jul 30 08:12:51 UTC 2011 - tittiatcoke@gmail.com
- Update to 15.0.839
-------------------------------------------------------------------
Thu Jul 21 17:06:31 UTC 2011 - tittiatcoke@gmail.com
- Update to 14.0.829
-------------------------------------------------------------------
Sun Jul 17 09:15:18 UTC 2011 - tittiatcoke@gmail.com
- Update to 14.0.825
-------------------------------------------------------------------
Tue Jul 12 02:26:20 UTC 2011 - nmarques@opensuse.org
- Fix for bnc#705223:
+ Icons are installed in hicolor instead of oxygen, this ensures
compatibility with open Desktop standards.
+ Add GTK icon cache update for >= 1140 on %post and %postun.
+ Removed the .png in %{_datadir}/pixmaps as hicolor is a better
option.
+ Add hicolor-icon-theme to BuildRequires and Requires.
-------------------------------------------------------------------
Mon Jun 13 11:49:27 UTC 2011 - tittiatcoke@gmail.com
- Update to 14.0.792
-------------------------------------------------------------------
Mon Jun 6 08:47:30 UTC 2011 - tittiatcoke@gmail.com
- Update to 14.0.786
-------------------------------------------------------------------
Sat Jun 4 07:22:05 UTC 2011 - tittiatcoke@gmail.com
- Update to 14.0.785
-------------------------------------------------------------------
Sat May 28 20:05:21 UTC 2011 - tittiatcoke@gmail.com
- Update to 13.0.780
-------------------------------------------------------------------
Wed May 25 13:03:04 UTC 2011 - tittiatcoke@gmail.com
- Update to 13.0.777
+ Builds now based on system library for V8.
+ Removed Shared Library build due to errors. Everything is back
into one single binary
+ Added patchfile to build with GCC 4.6
-------------------------------------------------------------------
Sun May 15 12:49:33 UTC 2011 - tittiatcoke@gmail.com
- Update to 13.0.767
-------------------------------------------------------------------
Thu Apr 28 17:44:47 UTC 2011 - tittiatcoke@gmail.com
- Update to 13.0.751
-------------------------------------------------------------------
Fri Apr 22 06:23:09 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.744
-------------------------------------------------------------------
Mon Apr 18 17:01:00 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.741
- Include icon-set for Oxygen. (bnc#684728)
-------------------------------------------------------------------
Fri Apr 8 15:29:13 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.731
-------------------------------------------------------------------
Sun Apr 3 15:30:49 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.724
-------------------------------------------------------------------
Thu Mar 31 19:28:18 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.721
-------------------------------------------------------------------
Mon Mar 28 18:26:22 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.718
- Added conflict for xine-browser-plugin
-------------------------------------------------------------------
Wed Mar 16 05:15:44 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.705
- Included option to detect the password store in /usr/bin/chromium
(options there are detect,default,gnome,kwallet)
-------------------------------------------------------------------
Fri Mar 11 08:42:36 UTC 2011 - tittiatcoke@gmail.com
- Update to 12.0.700
-------------------------------------------------------------------
Wed Mar 9 18:45:16 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.698
-------------------------------------------------------------------
Fri Mar 4 08:08:57 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.691
-------------------------------------------------------------------
Wed Mar 2 18:17:40 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.688
-------------------------------------------------------------------
Sun Feb 27 09:05:00 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.685
-------------------------------------------------------------------
Sun Feb 27 08:52:51 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.683
* Chromium will now use the internal ICU libraries for all
openSUSE versions.
-------------------------------------------------------------------
Wed Feb 16 23:45:49 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.674
-------------------------------------------------------------------
Tue Feb 15 18:37:51 UTC 2011 - tittiatcoke@gmail.com
- Update to 11.0.673
* For Factory the internal ICU libraries are used as that
Chromium does not build with the ones provided by Factory
-------------------------------------------------------------------
Wed Jan 19 13:23:13 UTC 2011 - prusnak@opensuse.org
- add more mimetypes to desktop file
-------------------------------------------------------------------
Sat Dec 25 09:40:13 UTC 2010 - rwooninck@opensuse.org
- update to 10.0.622.0
-------------------------------------------------------------------
Mon Oct 25 14:30:33 UTC 2010 - tittiatcoke@gmail.com
- Update to 9.0.564 build
* Added specific patches for MeeGo.
* We are now using shared libraries for Chromium
* Spec-file cleanup (Thanks to prusnak)
-------------------------------------------------------------------
Thu Jul 8 00:13:33 UTC 2010 - cristian.rodriguez@opensuse.org
- use jobs instead of a fixed numer of jobs, buildsystem may hang
-------------------------------------------------------------------
Wed Jul 7 20:10:06 UTC 2010 - cristian.rodriguez@opensuse.org
- workaround gcc bug, that produces extremely annoying
failure of the search bar.
-------------------------------------------------------------------
Mon May 24 01:17:14 UTC 2010 - cristian.rodriguez@opensuse.org
- do not include %{release} in RPM_VERSION that makes the
package to republish everytime to users even if there
are no code changes.
-------------------------------------------------------------------
Wed Mar 10 20:10:14 UTC 2010 - bgmerrell@novell.com
- Add master_preferences source file and install it to /etc/chromium.
- Create a new patch (chromium-master-prefs-path.patch) which tells
chromium to look in /etc/chromium for the master_preferences file
(instead of looking in the default directory, which is the same
directory as the 'chrome' binary).
-------------------------------------------------------------------
* Sun Mar 7 00:00:00 UTC 2010 - tititatcoke@gmail.com
- Update to 5.0.347
+ moved back to static binary again.
+ No longer depends on system v8
-------------------------------------------------------------------
* Mon Feb 21 00:00:00 UTC 2010 - tititatcoke@gmail.com
- Update to 5.0.341
+ remove courgette build and sources (patent issue)
+ Move to shared libraries build
+ Depends on system v8 again
-------------------------------------------------------------------
Sun Jan 24 21:42:27 UTC 2010 - prusnak@suse.cz
- added vendor to user agent (chromium-vendor.patch.in)
-------------------------------------------------------------------
Sun Nov 29 14:18:27 UTC 2009 - prusnak@suse.cz
- added --enable-sync to wrapper to enable bookmark sync
-------------------------------------------------------------------
* Sun Nov 29 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- Update to 4.0.260
-------------------------------------------------------------------
* Fri Nov 27 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- Update to 4.0.259
-------------------------------------------------------------------
* Thu Nov 26 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- Update to 4.0.258
-------------------------------------------------------------------
* Tue Nov 24 00:00:00 UTC 2009 - tittatcoke@gmai.com
- In order to complete prevent the wrong v8 version to be used,
the Chromium build has been changed to having an built-in v8
-------------------------------------------------------------------
* Tue Nov 24 00:00:00 UTC 2009 - dbuck@example.com
- Re-base patches.
- Fixed a few patch errors.
- Rename some patches to better correspond with function.
- Removed some patches.
- Minor SPEC changes.
- I changed the v8 requirement to be exact, instead of greater than a specific version.
-------------------------------------------------------------------
Fri Nov 13 20:34:05 UTC 2009 - tittiatcoke@gmail.com
- update to 247.0 svn 31928
-------------------------------------------------------------------
Fri Oct 30 13:58:11 UTC 2009 - tittiatcoke@gmail.com
- update to 229.0 svn 30454
+ Fix regression where popups and app frames lost their titlebars.
+ Makes it so that when a folder is open on the bookmark bar
and the mouse moves over another folder, the menu for that
folder is shown.
+ Lazily create the find bar.
+ Polish to the gmail checker sample.
* New, crisper icons that are exactly 19x19
* Add a loading animation at the beginning before Gmail
responds.
* Fix a bug where we sometimes don't update the UI after a
logout/login cycle.
+ Refactor widget methods to support desktop notifications,
including GTK stubs.
+ Find-in-page should not ding while deleting characters.
+ Add SSL wrapper for linux and mac. This allows notifier to
use chrome's SSL layer instead of OpenSSL.
+ Add three of the six extensions to PAC that Internet Explorer supports.
+ WebSocket support in chromium. (Run with --enable-web-sockets
enables WebSocket features.)
+ Do not allow GTK File Chooser dialogs to return directories.
+ Fix the notifier SSL layer to make notifications work for
Linux Bookmark sync.
+ linux: don't override mouse selection behavior in omnibox
-------------------------------------------------------------------
Sun Oct 25 08:37:29 UTC 2009 - tittiatcoke@gmail.com
- Update to 224.4 svn 30027
+ First cut at new page and browser action docs based
on new API. Deleted old stuff.
+ Add suppression for new memory leak caused by WebKit merge 49830:49844
+ Cleanup: change PIDs to base::ProcessId (or pid_t, as appropriate)
+ Minimize dependency of user scripts
+ Fixup the flip_framer eof-handling semantics now that we have
the FIN bit in place
+ app depends on x11 because of active_window_watcher_x
+ Adding two images for the new Extension managment UI
+ Removing hard-coded Chrome Frame output path
+ Rearrange clipboard code
+ Fix crash bug when attempting to download a url with unsupported scheme,
e.g. 'data:', by 'Alt + Click'
+ GTK: Change text for extension download UI
+ Ignore invalid urls on command line
+ Make dropped tabs animate from where they were dropped.
+ Make room for the full width of the tab placeholder.
+ Make tab dragging as smooth as glass.
+ Remove an annoying NOTIMPLEMNETED
+ Extensions: guarantee removal of BROWSER_WINDOW_READY registration
+ If we're in the middle of a drag, don't allow the user to middle
click to close or right click for the context menu
+ "Fix" a NOTIMPLEMENTED on Linux by using the default password store
+ Remove +x bit from files that shouldn't have it
+ Fold first 3 channels of multichannel instead of 5. Use fixed point
+ Adding new image needed for the managment UI
+ Fix a race bug where content scripts would not apply to the first page load
+ Make escape remove a bookmark if it's just been added (but not if it already existed)
+ Fix bubbles deactivating the opaque frame
+ Allow ESC to cancel ALT+SHIFT+T in Toolbar
+ ake all pepper plugins default to windowless and transparent
+ Add styles for printing
+ Implement the new extension management UI
+ Add support for to automation interface load install and load extensions
+ GTK: theme the info bar border
+ Update V8 to version 1.3.16.1
+ Introduce WebSecurityPolicy for security related methods
+ New button scheme...borders are separate from the inner contents so
that they can be highlighted / depressed independently
+ When opening Chrome maximized with an application window already
running, the Chrome window was not activated
+ Fix compatibility problems with FileZilla FTP Server
+ Remove the extension shelf on Linux
+ Fix the proxy host and port string to start with http:// if it does not already
+ Enable HTML5 databases for all extension renderer processes
-------------------------------------------------------------------
* Sat Oct 24 00:00:00 UTC 2009 - prusnak@opensuse.org
- don't create desktop files in wrapper
- fix LD_LIBRARY_PATH (chromium-fix-wrapper.patch)
-------------------------------------------------------------------
* Tue Oct 20 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- update to newer svn snapshot
+ Obsoletes fwrite patch (included upstream)
-------------------------------------------------------------------
* Fri Oct 16 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- update to newer svn snapshot
+ Requires newer version of v8
-------------------------------------------------------------------
* Thu Oct 15 00:00:00 UTC 2009 - prusnak@suse.cz
- do not force SSE on x86 (drop-sse.patch)
-------------------------------------------------------------------
* Tue Oct 13 00:00:00 UTC 2009 - tittiatcoke@gmail.com
- Update to newer svn snapshot
- Fixed spec file in order to build
- Included patch to build with system zlib
-------------------------------------------------------------------
* Mon Oct 12 00:00:00 UTC 2009 - prusnak@suse.cz
- package renamed to chromium
- cleaned up spec file
-------------------------------------------------------------------
* Tue Oct 6 00:00:00 UTC 2009 - dbuck@example.com
- v8 is now built as a separate package, and is required
- included many patches to use system libraries:
v8, icu, libxml2, libxslt, libjpeg, libpng, libevent, bzip2, zlib, nspr, nss
-------------------------------------------------------------------
* Sun Oct 1 00:00:00 UTC 2009 - dbuck@example.com
- included a newer DEP than is in svn, native_client@823
- things should compile cleanly now
-------------------------------------------------------------------
* Sun Aug 31 00:00:00 UTC 2009 - dbuck@example.com
- initial build
Reference in New Issue Copy Permalink