bump to 141.0.7390.7

chromium-121-rust-clang_lib.patch

@@ -1,42 +0,0 @@
-diff -up chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib chromium-121.0.6167.57/build/config/clang/BUILD.gn
---- chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib	2024-01-10 16:43:01.000000000 +0100
-+++ chromium-121.0.6167.57/build/config/clang/BUILD.gn	2024-01-20 19:51:38.481992799 +0100
-@@ -166,8 +166,7 @@
-       _prefix = "lib"
-       _suffix = ""
-       _ext = "a"
--
--      _clang_lib_dir = "$clang_base_path/lib/clang/$clang_version/lib"
-+      _libprefix = ""
-       if (is_win) {
-         _dir = "windows"
-         _prefix = ""
-@@ -197,7 +196,19 @@
-         } else {
-           assert(false)  # Unhandled cpu type
-         }
--      } else if (is_linux || is_chromeos) {
-+      } else if (is_linux) {
-+        _libprefix = "64"
-+        _dir = "linux"
-+        if (current_cpu == "x64") {
-+          _suffix ="-x86_64"
-+        } else if (current_cpu == "arm64") {
-+          _suffix = "-aarch64"
-+        } else if (current_cpu == "riscv64") {
-+          _suffix = "-riscv64"
-+        } else {
-+          assert(false)  # Unhandled cpu type
-+        }
-+      } else if (is_chromeos) {
-         if (current_cpu == "x64") {
-           _dir = "x86_64-unknown-linux-gnu"
-         } else if (current_cpu == "x86") {
-@@ -236,6 +247,7 @@
-         assert(false)  # Unhandled target platform
-       }
- 
-+      _clang_lib_dir = "$clang_base_path/lib${_libprefix}/clang/$clang_version/lib"
-       _lib_file = "${_prefix}clang_rt.${_libname}${_suffix}.${_ext}"
-       libs = [ "$_clang_lib_dir/$_dir/$_lib_file" ]
- 

chromium-125-compiler.patch

@@ -1,8 +1,8 @@
-Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
+Index: chromium-141.0.7378.3/build/config/compiler/BUILD.gn
 ===================================================================
---- chromium-141.0.7354.0.orig/build/config/compiler/BUILD.gn
+--- chromium-141.0.7378.3.orig/build/config/compiler/BUILD.gn
-+++ chromium-141.0.7354.0/build/config/compiler/BUILD.gn
++++ chromium-141.0.7378.3/build/config/compiler/BUILD.gn
-@@ -341,9 +341,7 @@ config("compiler") {
+@@ -337,9 +337,7 @@ config("compiler") {
  
    configs += [
      # See the definitions below.
@@ -12,7 +12,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
      ":compiler_codegen",
      ":compiler_deterministic",
      ":clang_warning_suppression",
-@@ -638,64 +636,6 @@ config("compiler") {
+@@ -634,64 +632,6 @@ config("compiler") {
      ldflags += [ "-Wl,-z,keep-text-section-prefix" ]
    }
  
@@ -77,7 +77,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    # C11/C++11 compiler flags setup.
    # ---------------------------
    if (is_linux || is_chromeos || is_android || current_os == "aix") {
-@@ -1646,43 +1586,6 @@ config("compiler_deterministic") {
+@@ -1642,43 +1582,6 @@ config("compiler_deterministic") {
      }
    }
  
@@ -121,7 +121,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    # Tells the compiler not to use absolute paths when passing the default
    # paths to the tools it invokes. We don't want this because we don't
    # really need it and it can mess up the RBE cache entries.
-@@ -1709,87 +1612,6 @@ config("compiler_deterministic") {
+@@ -1705,87 +1608,6 @@ config("compiler_deterministic") {
    }
  }
  
@@ -209,7 +209,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
  # Controls the usage of a warning suppression mapping (WSM) file to suppress
  # warnings based on the path of the file they come from. It's controlled by the
  # `clang_warning_suppression_file` gn argument , which points to a text file
-@@ -2287,10 +2109,6 @@ config("chromium_code") {
+@@ -2286,10 +2108,6 @@ config("chromium_code") {
      }
    } else {
      cflags = [ "-Wall" ]
@@ -220,7 +220,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
  
      # In Chromium code, we define __STDC_foo_MACROS in order to get the
      # C99 macros on Mac and Linux.
-@@ -2299,24 +2117,6 @@ config("chromium_code") {
+@@ -2298,24 +2116,6 @@ config("chromium_code") {
        "__STDC_FORMAT_MACROS",
      ]
  
@@ -236,7 +236,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
 -      # ChromeOS's toolchain supports a high-quality _FORTIFY_SOURCE=3
 -      # implementation with a few custom glibc patches. Use that if it's
 -      # available.
--      if (is_chromeos_device && !lacros_use_chromium_toolchain) {
+-      if (is_chromeos_device) {
 -        fortify_level = "3"
 -      }
 -      defines += [ "_FORTIFY_SOURCE=" + fortify_level ]
@@ -245,7 +245,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
      if (is_apple) {
        cflags_objc = [ "-Wimplicit-retain-self" ]
        cflags_objcc = [ "-Wimplicit-retain-self" ]
-@@ -2736,7 +2536,8 @@ config("default_stack_frames") {
+@@ -2735,7 +2535,8 @@ config("default_stack_frames") {
  # [0]: https://pinpoint-dot-chromeperf.appspot.com/job/147634a8be0000
  # [1]: https://pinpoint-dot-chromeperf.appspot.com/job/132bc772be0000
  # [2]: https://crrev.com/c/5447532
@@ -255,7 +255,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    if (is_win) {
      # clang-cl's /O2 corresponds to clang's -O3, and really want -O2 for
      # consistency with the other platforms.
-@@ -2785,7 +2586,8 @@ config("optimize") {
+@@ -2784,7 +2585,8 @@ config("optimize") {
  }
  
  # Turn off optimizations.
@@ -265,7 +265,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    if (is_win) {
      cflags = [
        "/Od",  # Disable optimization.
-@@ -2820,7 +2622,8 @@ config("no_optimize") {
+@@ -2819,7 +2621,8 @@ config("no_optimize") {
  # Turns up the optimization level. Used to explicitly enable -O2 instead of
  # -Os for select targets on platforms that use optimize_for_size. No-op
  # elsewhere.
@@ -275,7 +275,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    ldflags = common_optimize_on_ldflags
    if (is_win) {
      # Favor speed over size, /O2 must be before the common flags.
-@@ -2841,7 +2644,8 @@ config("optimize_max") {
+@@ -2840,7 +2643,8 @@ config("optimize_max") {
  #
  # TODO(crbug.com/41259697) - rework how all of these configs are related
  # so that we don't need this disclaimer.
@@ -285,7 +285,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    ldflags = common_optimize_on_ldflags
    if (is_win) {
      # Favor speed over size, /O2 must be before the common flags.
-@@ -2858,7 +2662,8 @@ config("optimize_speed") {
+@@ -2857,7 +2661,8 @@ config("optimize_speed") {
    rustflags = [ "-Copt-level=3" ]
  }
  
@@ -295,7 +295,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    cflags = [ "-O1" ] + common_optimize_on_cflags
    rustflags = [ "-Copt-level=1" ]
    ldflags = common_optimize_on_ldflags
-@@ -2985,7 +2790,8 @@ config("win_pdbaltpath") {
+@@ -2984,7 +2789,8 @@ config("win_pdbaltpath") {
  }
  
  # Full symbols.
@@ -305,7 +305,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    rustflags = []
    configs = []
    if (is_win) {
-@@ -3141,7 +2947,8 @@ config("symbols") {
+@@ -3140,7 +2946,8 @@ config("symbols") {
  # Minimal symbols.
  # This config guarantees to hold symbol for stack trace which are shown to user
  # when crash happens in unittests running on buildbot.
@@ -315,7 +315,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
    rustflags = []
    if (is_win) {
      # Functions, files, and line tables only.
-@@ -3217,7 +3024,8 @@ config("minimal_symbols") {
+@@ -3216,7 +3023,8 @@ config("minimal_symbols") {
  # This configuration contains function names only. That is, the compiler is
  # told to not generate debug information and the linker then just puts function
  # names in the final debug information.

chromium-133-bring_back_and_disable_allowlist.patch

@@ -1,6 +1,8 @@
---- chromium-133.0.6943.98/media/base/media_switches.h	2025/02/18 15:56:48	1.1
+Index: chromium-141.0.7378.3/media/base/media_switches.h
-+++ chromium-133.0.6943.98/media/base/media_switches.h	2025/02/18 15:57:20
+===================================================================
-@@ -516,6 +516,8 @@
+--- chromium-141.0.7378.3.orig/media/base/media_switches.h
++++ chromium-141.0.7378.3/media/base/media_switches.h
+@@ -519,6 +519,8 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(
  
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseWindowBoundsForPip);
  
@@ -9,11 +11,13 @@
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kMediaLogToConsole);
  
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kLibvpxUseChromeThreads);
---- chromium-133.0.6943.98/media/base/media_switches.cc	2025/02/18 15:56:07	1.1
+Index: chromium-141.0.7378.3/media/base/media_switches.cc
-+++ chromium-133.0.6943.98/media/base/media_switches.cc	2025/02/18 15:56:48
+===================================================================
-@@ -1657,6 +1657,11 @@
+--- chromium-141.0.7378.3.orig/media/base/media_switches.cc
-              "UseWindowBoundsForPip",
++++ chromium-141.0.7378.3/media/base/media_switches.cc
-              base::FEATURE_ENABLED_BY_DEFAULT);
+@@ -1687,6 +1687,11 @@ bool IsRestrictOwnAudioSupported() {
+ #endif
+ }
  
 +// Enables FFmpeg allow lists for supported codecs / containers.
 +BASE_FEATURE(kFFmpegAllowLists,
@@ -21,11 +25,13 @@
 +             base::FEATURE_DISABLED_BY_DEFAULT);
 +
  #if BUILDFLAG(IS_WIN)
- // Enables audio offload when supported by endpoints.
+ bool IsMediaFoundationD3D11VideoCaptureEnabled() {
- BASE_FEATURE(kAudioOffload, "AudioOffload", base::FEATURE_DISABLED_BY_DEFAULT);
+   return base::FeatureList::IsEnabled(kMediaFoundationD3D11VideoCapture);
---- chromium-133.0.6943.98/media/ffmpeg/ffmpeg_common.cc	2025/02/18 16:03:18	1.1
+Index: chromium-141.0.7378.3/media/ffmpeg/ffmpeg_common.cc
-+++ chromium-133.0.6943.98/media/ffmpeg/ffmpeg_common.cc	2025/02/18 16:04:02
+===================================================================
-@@ -19,6 +19,7 @@
+--- chromium-141.0.7378.3.orig/media/ffmpeg/ffmpeg_common.cc
++++ chromium-141.0.7378.3/media/ffmpeg/ffmpeg_common.cc
+@@ -16,6 +16,7 @@
  #include "media/base/audio_decoder_config.h"
  #include "media/base/decoder_buffer.h"
  #include "media/base/encryption_scheme.h"
@@ -33,7 +39,7 @@
  #include "media/base/media_util.h"
  #include "media/base/supported_types.h"
  #include "media/base/video_aspect_ratio.h"
-@@ -76,7 +76,8 @@
+@@ -72,7 +73,8 @@ const char* GetAllowedVideoDecoders() {
  void ApplyCodecContextSecuritySettings(AVCodecContext* codec_context) {
    // Future versions of ffmpeg may copy the allow list from the format
    // context.
@@ -43,9 +49,11 @@
      // Note: FFmpeg will try to free this string, so we must duplicate it.
      codec_context->codec_whitelist =
          av_strdup(codec_context->codec_type == AVMEDIA_TYPE_AUDIO
---- chromium-133.0.6943.98/media/filters/ffmpeg_glue.cc	2025/02/18 16:06:06	1.1
+Index: chromium-141.0.7378.3/media/filters/ffmpeg_glue.cc
-+++ chromium-133.0.6943.98/media/filters/ffmpeg_glue.cc	2025/02/18 16:07:06
+===================================================================
-@@ -131,8 +131,10 @@
+--- chromium-141.0.7378.3.orig/media/filters/ffmpeg_glue.cc
++++ chromium-141.0.7378.3/media/filters/ffmpeg_glue.cc
+@@ -137,8 +137,10 @@ FFmpegGlue::FFmpegGlue(FFmpegURLProtocol
    // memory usage.
    //
    // Note: FFmpeg will try to free these strings, so we must duplicate them.

chromium-135-add_map_droppable.patch

@@ -1,22 +0,0 @@
---- chromium-135.0.7023.0/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc	2025/04/04 08:28:56	1.1
-+++ chromium-135.0.7023.0/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc	2025/04/04 08:29:47
-@@ -34,6 +34,10 @@
- #include "sandbox/linux/system_headers/linux_syscalls.h"
- #include "sandbox/linux/system_headers/linux_time.h"
- 
-+#if !defined(MAP_DROPPABLE)
-+#define MAP_DROPPABLE	0x08    // Zero memory under memory pressure.
-+#endif
-+
- #if BUILDFLAG(IS_LINUX) && !defined(__arm__) && !defined(__aarch64__) && \
-     !defined(PTRACE_GET_THREAD_AREA)
- // Also include asm/ptrace-abi.h since ptrace.h in older libc (for instance
-@@ -236,7 +240,7 @@
-   // TODO(davidung), remove MAP_DENYWRITE with updated Tegra libraries.
-   const uint64_t kAllowedMask = MAP_SHARED | MAP_PRIVATE | MAP_ANONYMOUS |
-                                 MAP_STACK | MAP_NORESERVE | MAP_FIXED |
--                                MAP_DENYWRITE | MAP_LOCKED |
-+                                MAP_DENYWRITE | MAP_LOCKED | MAP_DROPPABLE |
-                                 kArchSpecificAllowedMask;
-   const Arg<int> flags(3);
-   return If((flags & ~kAllowedMask) == 0, Allow()).Else(CrashSIGSYS());

chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch

@@ -1,8 +1,10 @@
---- chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:48:58	1.1
+Index: chromium-141.0.7378.3/build/rust/allocator/lib.rs
-+++ chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:49:30
+===================================================================
-@@ -90,6 +90,12 @@
+--- chromium-141.0.7378.3.orig/build/rust/allocator/lib.rs
-     #[linkage = "weak"]
++++ chromium-141.0.7378.3/build/rust/allocator/lib.rs
-     fn __rust_no_alloc_shim_is_unstable_v2() {}
+@@ -96,6 +96,12 @@ mod both_allocators {
+         0
+     }
  
 +    // TODO(crbug.com/422538133) Remove after rolling past
 +    // https://github.com/rust-lang/rust/pull/141061
@@ -11,5 +13,5 @@
 +    static __rust_no_alloc_shim_is_unstable: u8 = 0;
 +
      // Mangle the symbol name as rustc expects.
+     // TODO(crbug.com/440481922): Remove this after rolling past https://github.com/rust-lang/rust/pull/143387
      #[rustc_std_internal_symbol]
-     #[allow(non_upper_case_globals)]

chromium.changes

@@ -1,16 +1,18 @@
 -------------------------------------------------------------------
-Sat Aug 23 19:50:33 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+Thu Sep  4 19:45:18 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
-- Chromium 141.0.7367.0
+- Chromium 141.0.7390.7
-  (dev released 2025-08-21)
+  (dev released 2025-09-04)
 - dropped patches:
   ppc-fedora-fix-rustc.patch (obsolete)
+  chromium-121-rust-clang_lib.patch
+  chromium-135-add_map_droppable.patch
 
 -------------------------------------------------------------------
-Wed Aug 20 19:24:57 UTC 2025 - ro@suse.de
+Thu Aug 28 18:06:15 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
-- Chromium 140.0.7339.24
+- Chromium 140.0.7339.41
-  (beta released 2025-08-20)
+  (early stable released 2025-08-27)
 - modified patches:
   chromium-125-compiler.patch
   chromium-libusb_interrupt_event_handler.patch
@@ -35,6 +37,12 @@ Wed Aug 20 19:24:57 UTC 2025 - ro@suse.de
 - bump gn BuildReq to 0.20250619
 - do not use system_harfbuzz for 16+ for now, unbundle is broken
 
+-------------------------------------------------------------------
+Wed Aug 27 12:12:26 CEST 2025 - ro@suse.de
+
+- Chromium 139.0.7258.154 (boo#1248769)
+  * CVE-2025-9478: Use after free in ANGLE
+
 -------------------------------------------------------------------
 Tue Aug 19 21:07:41 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

chromium.spec

@@ -117,7 +117,7 @@
 %global official_build 1
 
 Name:           chromium%{n_suffix}
-Version:        141.0.7367.0
+Version:        141.0.7390.7
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
@@ -152,7 +152,6 @@ Patch98:        chromium-102-regex_pattern-array.patch
 # PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding
 Patch202:       chromium-prop-codecs.patch
 Patch240:       chromium-117-string-convert.patch
-Patch261:       chromium-121-rust-clang_lib.patch
 Patch337:       chromium-123-missing-QtGui.patch
 Patch359:       chromium-126-quiche-interator.patch
 Patch360:       chromium-127-bindgen.patch
@@ -164,7 +163,6 @@ Patch369:       chromium-132-pdfium-explicit-template.patch
 Patch371:       chromium-133-bring_back_and_disable_allowlist.patch
 Patch373:       chromium-134-type-mismatch-error.patch
 Patch375:       chromium-131-fix-qt-ui.pach
-Patch376:       chromium-135-add_map_droppable.patch
 Patch377:       chromium-139-deterministic.patch
 Patch378:       chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
 Patch379:       chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
@@ -683,6 +681,7 @@ keeplibs=(
     third_party/libaom/source/libaom/third_party/SVT-AV1
     third_party/libaom/source/libaom/third_party/vector
     third_party/libaom/source/libaom/third_party/x86inc
+    third_party/libc++
     third_party/libgav1
     third_party/libjingle
     third_party/libphonenumber