From 23331c3286a2bfbd63705c2c0a4b27adb20d9ee717d9a4232facf65067501af2 Mon Sep 17 00:00:00 2001 From: Stanislav Brabec Date: Sun, 23 Nov 2025 23:34:51 +0100 Subject: [PATCH 1/2] Remove unused BuildRequires: update-desktop-files. --- chromium.changes | 5 +++++ chromium.spec | 1 - 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/chromium.changes b/chromium.changes index 1cd6a6e..95cfc84 100644 --- a/chromium.changes +++ b/chromium.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Sun Nov 23 23:30:00 CET 2025 - Stanislav Brabec + +- Remove unused BuildRequires: update-desktop-files. + ------------------------------------------------------------------- Mon Nov 17 23:40:26 CET 2025 - ro@suse.de diff --git a/chromium.spec b/chromium.spec index 91426f1..1c21528 100644 --- a/chromium.spec +++ b/chromium.spec @@ -279,7 +279,6 @@ BuildRequires: python311-setuptools BuildRequires: python311-six %endif BuildRequires: snappy-devel -BuildRequires: update-desktop-files BuildRequires: util-linux BuildRequires: wdiff BuildRequires: perl(Switch) From f6c3bfa54ee2dffa118e040a92fab6861dd6f56b8ffc0ad4037dd70cc9a3e1b1 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Tue, 2 Dec 2025 19:51:45 +0100 Subject: [PATCH 2/2] CVEs for 143.0.7499.40 boo#1254429 --- chromium.changes | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/chromium.changes b/chromium.changes index a7dcf55..2d923a5 100644 --- a/chromium.changes +++ b/chromium.changes @@ -1,8 +1,20 @@ ------------------------------------------------------------------- -Fri Nov 28 17:36:01 CET 2025 - ro@suse.de +Tue Dec 2 18:49:57 UTC 2025 - Andreas Stieger -- Chromium 143.0.7499.40 - (early stable released 2025-11-20) +- Chromium 143.0.7499.40 (boo#1254429): + * CVE-2025-13630: Type Confusion in V8 + * CVE-2025-13631: Inappropriate implementation in Google Updater + * CVE-2025-13632: Inappropriate implementation in DevTools + * CVE-2025-13633: Use after free in Digital Credentials + * CVE-2025-13634: Inappropriate implementation in Downloads + * CVE-2025-13720: Bad cast in Loader + * CVE-2025-13721: Race in v8 + * CVE-2025-13635: Inappropriate implementation in Downloads + * CVE-2025-13636: Inappropriate implementation in Split View + * CVE-2025-13637: Inappropriate implementation in Downloads + * CVE-2025-13638: Use after free in Media Stream + * CVE-2025-13639: Inappropriate implementation in WebRTC + * CVE-2025-13640: Inappropriate implementation in Passwords - added patches: chromium-143-libpng-unbundle.patch (workaround broken libpng unbundle)