d1c8ae190c
- Update to 83.0.4103.61 bsc#1171910: * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21 * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26 * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06 * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30 * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02 * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Michał Bentkowski of Securitum on 2020-03-30 * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08 * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25 * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06 * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07 * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31 * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18 * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26 * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24 * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14 * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21 * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07 * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17 * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23 * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26 * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30 * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24 * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06 * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21 * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10 * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19 * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07 - Rebase patch: * chromium-vaapi.patch
Tomáš Chvátal
2020-05-20 10:20:10 +00:00
2abdd645d3
Accepting request 807553 from network:chromium
Tomáš Chvátal
2020-05-20 09:32:57 +00:00
a2ab999578
- update to 81.0.4044.138 bsc#1171247: * CVE-2020-6831: Stack buffer overflow in SCTP * CVE-2020-6464: Type Confusion in Blink.
Tomáš Chvátal
2020-05-06 07:56:16 +00:00
9cd010023e
Accepting request 800274 from home:namtrac:branches:network:chromium
Tomáš Chvátal
2020-05-05 08:18:03 +00:00
1879208d0d
Accepting request 798873 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-04-29 11:58:02 +00:00
b10b70b82d
Accepting request 798595 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-04-28 09:27:26 +00:00
03ac78616f
Accepting request 796156 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-04-22 06:12:49 +00:00
f986023750
- Update to 81.0.4044.113 bsc#1169729: * CVE-2020-6457: Use after free in speech recognizer
Tomáš Chvátal
2020-04-17 08:17:14 +00:00
2a0916e1d9
- Update to 81.0.4044.92 bsc#1168911: * CVE-2020-6454: Use after free in extensions * CVE-2020-6423: Use after free in audio * CVE-2020-6455: Out of bounds read in WebSQL * CVE-2020-6430: Type Confusion in V8 * CVE-2020-6456: Insufficient validation of untrusted input in clipboard * CVE-2020-6431: Insufficient policy enforcement in full screen * CVE-2020-6432: Insufficient policy enforcement in navigations * CVE-2020-6433: Insufficient policy enforcement in extensions * CVE-2020-6434: Use after free in devtools * CVE-2020-6435: Insufficient policy enforcement in extensions * CVE-2020-6436: Use after free in window management * CVE-2020-6437: Inappropriate implementation in WebView * CVE-2020-6438: Insufficient policy enforcement in extensions * CVE-2020-6439: Insufficient policy enforcement in navigations * CVE-2020-6440: Inappropriate implementation in extensions * CVE-2020-6441: Insufficient policy enforcement in omnibox * CVE-2020-6442: Inappropriate implementation in cache * CVE-2020-6443: Insufficient data validation in developer tools * CVE-2020-6444: Uninitialized Use in WebRTC * CVE-2020-6445: Insufficient policy enforcement in trusted types * CVE-2020-6446: Insufficient policy enforcement in trusted types * CVE-2020-6447: Inappropriate implementation in developer tools * CVE-2020-6448: Use after free in V8 - Add new patches: * chromium-81-gcc-constexpr.patch * chromium-81-gcc-noexcept.patch * fix-vaapi-with-glx.patch - Remove no longer needed patches: * chromium-80-gcc-abstract.patch
Tomáš Chvátal
2020-04-08 08:45:00 +00:00
75a9b604bc
Accepting request 792360 from network:chromium
Tomáš Chvátal
2020-04-08 08:38:34 +00:00
0aa1e8d993
- Update to 80.0.3987.162 bsc#1168421: * CVE-2020-6450: Use after free in WebAudio. * CVE-2020-6451: Use after free in WebAudio. * CVE-2020-6452: Heap buffer overflow in media.
Tomáš Chvátal
2020-04-02 09:42:43 +00:00
2c4b5dd583
Accepting request 789463 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-03-29 14:45:43 +00:00
20c8b35373
Accepting request 789366 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-03-29 07:06:06 +00:00
1f0dc58d06
Accepting request 789070 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2020-03-27 15:15:58 +00:00
33bdf69138
Accepting request 787802 from home:alarrosa:branches:network:chromium
Tomáš Chvátal
2020-03-24 13:22:18 +00:00
2237d02dd2
- Update to 80.0.3987.149: * High CVE-2020-6422: Use after free in WebGL. * High CVE-2020-6424: Use after free in media. * High CVE-2020-6425: Insufficient policy enforcement in extensions. * High CVE-2020-6426: Inappropriate implementation in V8. * High CVE-2020-6427: Use after free in audio. * High CVE-2020-6428: Use after free in audio. * High CVE-2020-6429: Use after free in audio. * High CVE-2019-20503: Out of bounds read in usersctplib. * High CVE-2020-6449: Use after free in audio. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2020-03-19 11:27:49 +00:00
77b439a6c0
- Do not pull in python deps except interpreter, the bundles are patched anwyays
Tomáš Chvátal
2020-03-14 09:18:59 +00:00
592abf4abe
- Update to 80.0.3987.132 bsc#1165826: * CVE-2020-6420: Insufficient policy enforcement in media. * Various fixes from internal audits, fuzzing and other initiatives [2].
Tomáš Chvátal
2020-03-05 18:33:34 +00:00
9ca4de86e1
- Add patch trying to fix pulse audio issues with webrtc: * webrtc-pulse.patch
Tomáš Chvátal
2020-03-03 16:48:39 +00:00
94fb5eb74a
- Update to 80.0.3987.122 bsc#1164828: * CVE-2020-6418: Type confusion in V8 * CVE-2020-6407: Out of bounds memory access in streams. * Integer overflow in ICU
Tomáš Chvátal
2020-02-25 13:43:08 +00:00
96c5a8a1e2
- Add chromedriver binary to bindir
Tomáš Chvátal
2020-02-17 12:19:26 +00:00
bf1749a8ee
- Drop sandbox binary as it should not be needed really bsc#1163588 - Remove unused patch: * chromium-sandbox-pie.patch
Tomáš Chvátal
2020-02-13 14:52:49 +00:00
8ddf0d5784
- Update to 80.0.3987.100 bsc#1163484: * feature fixes only
Tomáš Chvátal
2020-02-12 13:31:36 +00:00
56c725c5af
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox
Tomáš Chvátal
2020-02-05 13:12:40 +00:00
6b33d30618
Accepting request 770266 from network:chromium
Tomáš Chvátal
2020-02-05 13:08:00 +00:00
72cc1b1e68
Accepting request 765546 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-01-19 14:40:57 +00:00
7ee331de96
* CVE-2020-6377: Use after free in audio
Tomáš Chvátal
2020-01-09 13:32:48 +00:00
a170053757
- Update to 79.0.3945.117 bsc#1160337: * CVE-TBD: Use after free in audio * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2020-01-08 07:56:01 +00:00
9c994b1622
* CVE-2019-5844 CVE-2019-5845 CVE-2019-5846
Tomáš Chvátal
2020-01-07 08:20:40 +00:00
16d4bb5632
Accepting request 760085 from home:StefanBruens:branches:network:chromium
Martin Pluskal2019-12-31 08:29:34 +00:00
61f3e0be22
Accepting request 758422 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-12-21 12:39:34 +00:00
39ae7f8042
- Update to 79.0.3945.79: * CVE-2019-13725: Use after free in Bluetooth * CVE-2019-13726: Heap buffer overflow in password manager * CVE-2019-13727: Insufficient policy enforcement in WebSockets * CVE-2019-13728: Out of bounds write in V8 * CVE-2019-13729: Use after free in WebSockets * CVE-2019-13730: Type Confusion in V8 * CVE-2019-13732: Use after free in WebAudio * CVE-2019-13734: Out of bounds write in SQLite * CVE-2019-13735: Out of bounds write in V8 * CVE-2019-13764: Type Confusion in V8 * CVE-2019-13736: Integer overflow in PDFium * CVE-2019-13737: Insufficient policy enforcement in autocomplete * CVE-2019-13738: Insufficient policy enforcement in navigation * CVE-2019-13739: Incorrect security UI in Omnibox * CVE-2019-13740: Incorrect security UI in sharing * CVE-2019-13741: Insufficient validation of untrusted input in Blink * CVE-2019-13742: Incorrect security UI in Omnibox * CVE-2019-13743: Incorrect security UI in external protocol handling * CVE-2019-13744: Insufficient policy enforcement in cookies * CVE-2019-13745: Insufficient policy enforcement in audio * CVE-2019-13746: Insufficient policy enforcement in Omnibox * CVE-2019-13747: Uninitialized Use in rendering * CVE-2019-13748: Insufficient policy enforcement in developer tools * CVE-2019-13749: Incorrect security UI in Omnibox * CVE-2019-13750: Insufficient data validation in SQLite * CVE-2019-13751: Uninitialized Use in SQLite * CVE-2019-13752: Out of bounds read in SQLite * CVE-2019-13753: Out of bounds read in SQLite * CVE-2019-13754: Insufficient policy enforcement in extensions
Tomáš Chvátal
2019-12-11 09:37:24 +00:00
b762e358e8
Accepting request 755755 from network:chromium
Tomáš Chvátal
2019-12-11 09:26:30 +00:00
df4f09f5f1
- Update to 78.0.3904.108 bsc#1157269: * CVE-2019-13723: Use-after-free in Bluetooth * CVE-2019-13724: Out-of-bounds access in Bluetooth * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-11-20 10:55:56 +00:00
4d146ae8b0
Accepting request 749197 from home:Guillaume_G:branches:network:chromium
Tomáš Chvátal
2019-11-18 08:27:43 +00:00
3140c369c8
Accepting request 746592 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-11-08 13:10:55 +00:00
724b995ae1
Accepting request 746208 from network:chromium
Tomáš Chvátal
2019-11-07 10:15:42 +00:00
9f3461d90a
Accepting request 746208 from network:chromium
Tomáš Chvátal
2019-11-07 10:15:42 +00:00
424e1509ad
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00
06c600edf4
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00
cbe50521f3
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration
Tomáš Chvátal
2019-10-24 12:43:53 +00:00
b29718b3df
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration
Tomáš Chvátal
2019-10-24 12:43:53 +00:00
4f10c7fda3
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch
Tomáš Chvátal
2019-10-23 13:10:24 +00:00
20718ecae2
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch
Tomáš Chvátal
2019-10-23 13:10:24 +00:00
f3e1596bc9
Accepting request 742142 from network:chromium
Tomáš Chvátal
2019-10-23 13:00:30 +00:00
ef12afcdac
Accepting request 742142 from network:chromium
Tomáš Chvátal
2019-10-23 13:00:30 +00:00
4f9334b38f
Accepting request 741097 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2019-10-18 17:48:19 +00:00
6840838634
Accepting request 741097 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2019-10-18 17:48:19 +00:00
7d471af686
- Update to 77.0.3865.120 bsc#1153660: * CVE-2019-13693: Use-after-free in IndexedDB * CVE-2019-13694: Use-after-free in WebRTC * CVE-2019-13695: Use-after-free in audio * CVE-2019-13696: Use-after-free in V8 * CVE-2019-13697: Cross-origin size leak. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-10-11 08:23:36 +00:00
0f37af0f01
- Update to 77.0.3865.120 bsc#1153660: * CVE-2019-13693: Use-after-free in IndexedDB * CVE-2019-13694: Use-after-free in WebRTC * CVE-2019-13695: Use-after-free in audio * CVE-2019-13696: Use-after-free in V8 * CVE-2019-13697: Cross-origin size leak. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-10-11 08:23:36 +00:00
92cf02edc4
Accepting request 732023 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-09-20 05:56:20 +00:00
a179617a6c
Accepting request 732023 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-09-20 05:56:20 +00:00
1d593c56ab
Accepting request 731818 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-09-19 07:25:39 +00:00
c829292448
Accepting request 731818 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-09-19 07:25:39 +00:00
e3827e157e
- Add patch from Fedora for cert transparency: * chromium-77.0.3865.75-certificate-transparency.patch
Tomáš Chvátal
2019-09-16 09:13:00 +00:00
78b01531eb
- Add patch from Fedora for cert transparency: * chromium-77.0.3865.75-certificate-transparency.patch
Tomáš Chvátal
2019-09-16 09:13:00 +00:00