- Chromium 134.0.6998.165

* stability fixes (boo#1240022)
- delete patch:
  chromium-120-make_unique-struct.patch (not needed)
- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens
- use rust1.85

- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8

OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=2100

chromium-134-revert-allowlist.patch

@@ -1,26 +0,0 @@
---- chromium-134.0.6974.3/.gn	2025/01/28 13:04:11	1.1
-+++ chromium-134.0.6974.3/.gn	2025/01/28 13:05:01
-@@ -90,7 +90,7 @@
-   "//v8:v8_libplatform",  # 2 errors
- ]
- 
--# These are the list of GN files that run exec_script. This allowlist exists
-+# These are the list of GN files that run exec_script. This whitelist exists
- # to force additional review for new uses of exec_script, which is strongly
- # discouraged.
- #
-@@ -145,11 +145,11 @@
- #      this situation much easier to create. if the build always lists the
- #      files and passes them to a script, it will always be correct.
- 
--exec_script_allowlist =
--    build_dotfile_settings.exec_script_allowlist +
-+exec_script_whitelist =
-+    build_dotfile_settings.exec_script_whitelist +
-     angle_dotfile_settings.exec_script_whitelist +
-     [
--      # Allowlist entries for //build should go into
-+      # Whitelist entries for //build should go into
-       # //build/dotfile_settings.gni instead, so that they can be shared
-       # with other repos. The entries in this list should be only for files
-       # in the Chromium repo outside of //build.

chromium.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Mar 26 12:29:38 CET 2025 - ro@suse.de
+
+- drop chromium-134-revert-allowlist.patch
+  (obsolete, gn has been updated) 
+
 -------------------------------------------------------------------
 Sat Mar 22 14:18:24 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
@@ -7,8 +13,7 @@ Sat Mar 22 14:18:24 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 -------------------------------------------------------------------
 Fri Mar 21 16:57:02 CET 2025 - ro@suse.de
 
-- disable not needed chromium-120-make_unique-struct.patch
+- drop chromium-120-make_unique-struct.patch (not needed)
-  (context boo#1239780)
 
 -------------------------------------------------------------------
 Thu Mar 20 12:05:15 CET 2025 - ro@suse.de

chromium.spec

@@ -143,7 +143,6 @@ Patch98:        chromium-102-regex_pattern-array.patch
 # PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding
 Patch202:       chromium-prop-codecs.patch
 Patch240:       chromium-117-string-convert.patch
-#Patch256:       chromium-120-make_unique-struct.patch
 Patch261:       chromium-121-rust-clang_lib.patch
 Patch337:       chromium-123-missing-QtGui.patch
 Patch359:       chromium-126-quiche-interator.patch
@@ -155,7 +154,6 @@ Patch368:       chromium-131-clang-stack-protector.patch
 Patch369:       chromium-132-pdfium-explicit-template.patch
 Patch370:       fix-build-with-pipewire-1.3.82.patch
 Patch371:       chromium-133-bring_back_and_disable_allowlist.patch
-Patch372:       chromium-134-revert-allowlist.patch
 Patch373:       chromium-134-type-mismatch-error.patch
 Patch375:       chromium-131-fix-qt-ui.pach
 # conditionally applied patches