chromium/chromium-dev
SHA256
6
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • d6da67d69b OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1149 Tomáš Chvátal 2018-07-25 13:14:13 +00:00
  • ae3d1ff9e8 - Enable system vpx we should have new enough version everywhere now Tomáš Chvátal 2018-07-25 13:08:42 +00:00
  • 4dc4c9d7dd OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1147 Tomáš Chvátal 2018-07-25 10:46:51 +00:00
  • 9a1a226d72 - Rebase patches: * chromium-master-prefs-path.patch * chromium-non-void-return.patch * chromium-vaapi.patch - Add patches: * chromium-cors-string.patch * chromium-gcc.patch * chromium-libjpeg.patch * chromium-libwebp-shim.patch - Remove patches: * chromium-gcc8.patch Tomáš Chvátal 2018-07-25 10:46:23 +00:00
  • 1d7f944a03 - Version update to 68.0.3440.75 bsc#1102530: * CVE-2018-6153: Stack buffer overflow in Skia. * CVE-2018-6154: Heap buffer overflow in WebGL. * CVE-2018-6155: Use after free in WebRTC. * CVE-2018-6156: Heap buffer overflow in WebRTC. * CVE-2018-6157: Type confusion in WebRTC. * CVE-2018-6158: Use after free in Blink. * CVE-2018-6159: Same origin policy bypass in ServiceWorker. * CVE-2018-6160: URL spoof in Chrome on iOS. * CVE-2018-6161: Same origin policy bypass in WebAudio. * CVE-2018-6162: Heap buffer overflow in WebGL. * CVE-2018-6163: URL spoof in Omnibox. * CVE-2018-6164: Same origin policy bypass in ServiceWorker. * CVE-2018-6165: URL spoof in Omnibox. * CVE-2018-6166: URL spoof in Omnibox. * CVE-2018-6167: URL spoof in Omnibox. * CVE-2018-6168: CORS bypass in Blink. * CVE-2018-6169: Permissions bypass in extension installation. * CVE-2018-6170: Type confusion in PDFium. * CVE-2018-6171: Use after free in WebBluetooth. * CVE-2018-6172: URL spoof in Omnibox. * CVE-2018-6173: URL spoof in Omnibox. * CVE-2018-6174: Integer overflow in SwiftShader. * CVE-2018-6175: URL spoof in Omnibox. * CVE-2018-6176: Local user privilege escalation in Extensions. * CVE-2018-6177: Cross origin information leak in Blink. * CVE-2018-6178: UI spoof in Extensions. * CVE-2018-6179: Local file information leak in Extensions. * CVE-2018-6044: Request privilege escalation in Extensions. * CVE-2018-4117: Cross origin information leak in Blink. Tomáš Chvátal 2018-07-25 10:01:12 +00:00
  • e7ada8195c Accepting request 625247 from network:chromium Tomáš Chvátal 2018-07-25 09:58:33 +00:00
  • feee55065b - Version update to 67.0.3396.99: * Various small feature fixes, no security Tomáš Chvátal 2018-07-10 11:42:54 +00:00
  • f0245d225e OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1140 Tomáš Chvátal 2018-06-16 12:25:11 +00:00
  • 9e9daea95b OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1139 Tomáš Chvátal 2018-06-16 12:10:18 +00:00
  • 8beffe0d45 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1138 Tomáš Chvátal 2018-06-16 12:00:23 +00:00
  • 456043ca9a - Add patch to build under gcc8: * chromium-gcc8.patch Tomáš Chvátal 2018-06-15 19:52:10 +00:00
  • 5d88d60b4d Accepting request 616575 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-06-13 16:02:16 +00:00
  • 1469199147 Accepting request 615035 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-06-08 04:17:04 +00:00
  • 2f7245ecf5 - Require ffmpeg >= 4.0 bsc#1095545 Tomáš Chvátal 2018-06-01 17:46:47 +00:00
  • eeddc0df2b - Update to 67.0.3396.62 bsc#1095163 * CVE-2018-6123: Use after free in Blink. * CVE-2018-6124: Type confusion in Blink. * CVE-2018-6125: Overly permissive policy in WebUSB. * CVE-2018-6126: Heap buffer overflow in Skia. * CVE-2018-6127: Use after free in indexedDB. * CVE-2018-6128: uXSS in Chrome on iOS. * CVE-2018-6129: Out of bounds memory access in WebRTC. * CVE-2018-6130: Out of bounds memory access in WebRTC. * CVE-2018-6131: Incorrect mutability protection in WebAssembly. * CVE-2018-6132: Use of uninitialized memory in WebRTC. * CVE-2018-6133: URL spoof in Omnibox. * CVE-2018-6134: Referrer Policy bypass in Blink. * CVE-2018-6135: UI spoofing in Blink. * CVE-2018-6136: Out of bounds memory access in V8. * CVE-2018-6137: Leak of visited status of page in Blink. * CVE-2018-6138: Overly permissive policy in Extensions. * CVE-2018-6139: Restrictions bypass in the debugger extension API. * CVE-2018-6140: Restrictions bypass in the debugger extension API. * CVE-2018-6141: Heap buffer overflow in Skia. * CVE-2018-6142: Out of bounds memory access in V8. * CVE-2018-6143: Out of bounds memory access in V8. * CVE-2018-6144: Out of bounds memory access in PDFium. * CVE-2018-6145: Incorrect escaping of MathML in Blink. * CVE-2018-6147: Password fields not taking advantage of OS protections in Views. - Add patches to build on aarch and remove obsolete one: * chromium-crashpad-aarch64-fix.patch * chromium-skia-aarch64-buildfix.patch * chromium-65.0.3325.162-skia-aarch64-buildfix.patch * chromium-skia-neon.patch Tomáš Chvátal 2018-05-30 11:20:59 +00:00
  • 481230dcc1 Accepting request 613035 from network:chromium Tomáš Chvátal 2018-05-30 11:15:30 +00:00
  • 6f2d7ed7c8 Accepting request 612433 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-05-27 05:20:49 +00:00
  • 16ca4874c4 Accepting request 612364 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-05-26 11:09:04 +00:00
  • be69def5fd Accepting request 609001 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-05-16 07:48:41 +00:00
  • 697ec8f2e6 Accepting request 606435 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-05-11 12:31:02 +00:00
  • 41cf46f1bc - Add patch chromium-skia-system-fontconfig.patch to fix bsc#1092272 Tomáš Chvátal 2018-05-09 08:39:35 +00:00
  • 2f9393b4fc Accepting request 605672 from home:Guillaume_G:branches:openSUSE:Factory:ARM Tomáš Chvátal 2018-05-09 08:24:10 +00:00
  • 3ab47fb6c6 Accepting request 602239 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-04-28 09:25:41 +00:00
  • f97a92fb80 - Up to chromium-67.0.3396.18 Tomáš Chvátal 2018-04-27 08:25:54 +00:00
  • cc538a1940 Accepting request 597887 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-04-19 05:59:22 +00:00
  • c7ed536074 - Add patch to fix missing folder from tarball: * add-missing-blink-tools.patch Tomáš Chvátal 2018-04-18 09:14:57 +00:00
  • 284e3112b5 - Version bump to chromium 66.0.3359.117 bsc#1090000: * CVE-2018-6085: Use after free in Disk Cache * CVE-2018-6086: Use after free in Disk Cache * CVE-2018-6087: Use after free in WebAssembly * CVE-2018-6088: Use after free in PDFium * CVE-2018-6089: Same origin policy bypass in Service Worker * CVE-2018-6090: Heap buffer overflow in Skia * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker * CVE-2018-6092: Integer overflow in WebAssembly * CVE-2018-6093: Same origin bypass in Service Worker * CVE-2018-6094: Exploit hardening regression in Oilpan * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload * CVE-2018-6096: Fullscreen UI spoof * CVE-2018-6097: Fullscreen UI spoof * CVE-2018-6098: URL spoof in Omnibox * CVE-2018-6099: CORS bypass in ServiceWorker * CVE-2018-6100: URL spoof in Omnibox * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools * CVE-2018-6102: URL spoof in Omnibox * CVE-2018-6103: UI spoof in Permissions * CVE-2018-6104: URL spoof in Omnibox * CVE-2018-6105: URL spoof in Omnibox * CVE-2018-6106: Incorrect handling of promises in V8 * CVE-2018-6107: URL spoof in Omnibox * CVE-2018-6108: URL spoof in Omnibox * CVE-2018-6109: Incorrect handling of files by FileAPI * CVE-2018-6110: Incorrect handling of plaintext files via file:// * CVE-2018-6111: Heap-use-after-free in DevTools * CVE-2018-6112: Incorrect URL handling in DevTools * CVE-2018-6113: URL spoof in Navigation Tomáš Chvátal 2018-04-18 09:13:39 +00:00
  • 761036a084 Accepting request 597716 from network:chromium Tomáš Chvátal 2018-04-18 08:59:31 +00:00
  • 7fc836ab2a - Add vaapi patches: * chromium-vaapi-init.patch * chromium-vaapi.patch Tomáš Chvátal 2018-04-08 10:50:56 +00:00
  • a18b38564b OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1111 Tomáš Chvátal 2018-04-07 06:55:21 +00:00
  • 4352630548 - Use memory-constraints package to limit threads as needed >>>>>>> ./chromium.changes.r47afdab4f36d0667875ab6cd647e0111 Tomáš Chvátal 2018-04-06 12:59:51 +00:00
  • 1e552151c1 Accepting request 589652 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-03-21 07:51:13 +00:00
  • 0bbe436a54 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1107 Tomáš Chvátal 2018-03-20 12:36:27 +00:00
  • ba6f498dbf - Use both freetype and harfbuzz either bundled or system Tomáš Chvátal 2018-03-20 12:34:27 +00:00
  • 020928a31f - Version update to 65.0.3325.162: * Various stability fixes only Tomáš Chvátal 2018-03-14 14:32:05 +00:00
  • 17a6216aa0 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1103 Tomáš Chvátal 2018-03-14 11:14:59 +00:00
  • 3b4d1633af - Bundle the harfbuzz on < 15.0 release as we would have to use requires_ge for the library itself later on otherwise Tomáš Chvátal 2018-03-14 09:01:19 +00:00
  • 600e9636b9 - Add patch chromium-drm.patch to make sure to build with Leap 42.3 variant of libdrm Tomáš Chvátal 2018-03-09 11:08:34 +00:00
  • aeea315714 Accepting request 584220 from network:chromium OBS User buildservice-autocommit 2018-03-09 09:44:46 +00:00
  • b44e793e98 Updating link to change in openSUSE:Factory/chromium revision 180.0 OBS User buildservice-autocommit 2018-03-09 09:44:46 +00:00
  • 843f63ffa2 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1099 Tomáš Chvátal 2018-03-09 09:24:14 +00:00
  • d58f014baa - Make sure to require gcc7 Tomáš Chvátal 2018-03-09 09:11:04 +00:00
  • 9f6153e9f7 - Version update to 65.0.3325.146 bsc#1084296: * High CVE-2017-11215: Use after free in Flash. * High CVE-2017-11225: Use after free in Flash. * High CVE-2018-6060: Use after free in Blink. * High CVE-2018-6061: Race condition in V8. * High CVE-2018-6062: Heap buffer overflow in Skia. * High CVE-2018-6057: Incorrect permissions on shared memory. * High CVE-2018-6063: Incorrect permissions on shared memory. * High CVE-2018-6064: Type confusion in V8. * High CVE-2018-6065: Integer overflow in V8. * Medium CVE-2018-6066: Same Origin Bypass via canvas. * Medium CVE-2018-6067: Buffer overflow in Skia. * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab. * Medium CVE-2018-6069: Stack buffer overflow in Skia. * Medium CVE-2018-6070: CSP bypass through extensions. * Medium CVE-2018-6071: Heap bufffer overflow in Skia. * Medium CVE-2018-6072: Integer overflow in PDFium. * Medium CVE-2018-6073: Heap bufffer overflow in WebGL. * Medium CVE-2018-6074: Mark-of-the-Web bypass. * Medium CVE-2018-6075: Overly permissive cross origin downloads. * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink. * Medium CVE-2018-6077: Timing attack using SVG filters. * Medium CVE-2018-6078: URL Spoof in OmniBox. * Medium CVE-2018-6079: Information disclosure via texture data in WebGL. * Medium CVE-2018-6080: Information disclosure in IPC call. * Low CVE-2018-6081: XSS in interstitials. * Low CVE-2018-6082: Circumvention of port blocking. * Low CVE-2018-6083: Incorrect processing of AppManifests. - Add new patches: * chromium-compiler.patch Tomáš Chvátal 2018-03-08 09:07:27 +00:00
  • 3cdbd60cae Accepting request 584217 from network:chromium Tomáš Chvátal 2018-03-08 08:58:24 +00:00
  • 835d511e7d Accepting request 579831 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-02-24 19:26:14 +00:00
  • f1cf6b5411 Accepting request 576494 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2018-02-14 12:16:31 +00:00
  • c3a004cd49 - Version update to 64.0.3282.140 bsc#1079021: * Various asan fixes bsc#1078463 CVE-2018-6406 Tomáš Chvátal 2018-02-02 11:22:25 +00:00
  • e4700b8d33 Accepting request 571983 from home:dimstar:Factory Tomáš Chvátal 2018-02-02 11:10:25 +00:00
  • 6978e40984 - Fix default page to not point to 404 Tomáš Chvátal 2018-01-29 13:08:00 +00:00
  • 164b940dd3 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1086 Tomáš Chvátal 2018-01-29 13:00:41 +00:00
  • b0f3666621 - Install swiftshader objects too as they are needed Tomáš Chvátal 2018-01-29 12:48:04 +00:00
  • b37d7ce573 breaks up runtime bsc#1077722 Tomáš Chvátal 2018-01-26 13:55:49 +00:00
  • d8c176b8c3 - Disable ozone stuff conditions for now as the headless mode breaks up runtime Tomáš Chvátal 2018-01-26 13:52:01 +00:00
  • 2720e56449 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1081 Tomáš Chvátal 2018-01-25 09:58:45 +00:00
  • 747181668b - Switch to gcc7 on Leap builds Tomáš Chvátal 2018-01-25 09:52:21 +00:00
  • e15ebd32ad - Version update to 64.0.3282.119 bsc#1077571: * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01 * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20 * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09 * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12 * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23 * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30 * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09 * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12 * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17 * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26 * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29 * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12 * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16 * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23 * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31 * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08 * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08 * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05 * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13 * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15 * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11 * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28 * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23 * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24 - Add patches: * chromium-angle.patch * chromium-memcpy.patch - Drop patch: * chromium-gcc.patch Tomáš Chvátal 2018-01-25 09:50:45 +00:00
  • 2f97f56097 Accepting request 569452 from network:chromium Tomáš Chvátal 2018-01-25 09:39:46 +00:00
  • b415f021de Accepting request 561745 from home:AndreasStieger:branches:network:chromium Martin Pluskal 2018-01-05 08:37:52 +00:00
  • d19de968aa - Version update to 63.0.3239.108 bsc#1072976: * CVE-2017-15429: UXSS in V8 * Various fuzzing fixes Tomáš Chvátal 2017-12-15 09:28:50 +00:00
  • a1a8605f8b - Update to 62.0.3202.94: * multiple minor rendering related fixes Tomáš Chvátal 2017-12-07 09:49:58 +00:00
  • 67fcd38e0e - Version update to 63.0.3239.84 bsc#1071691: * Critical CVE-2017-15407: Out of bounds write in QUIC. * High CVE-2017-15408: Heap buffer overflow in PDFium. * High CVE-2017-15409: Out of bounds write in Skia. * High CVE-2017-15410: Use after free in PDFium. * High CVE-2017-15411: Use after free in PDFium. * High CVE-2017-15412: Use after free in libXML. * High CVE-2017-15413: Type confusion in WebAssembly. * Medium CVE-2017-15415: Pointer information disclosure in IPC call. * Medium CVE-2017-15416: Out of bounds read in Blink. * Medium CVE-2017-15417: Cross origin information disclosure in Skia. * Medium CVE-2017-15418: Use of uninitialized value in Skia. * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink. * Medium CVE-2017-15420: URL spoofing in Omnibox. * Medium CVE-2017-15422: Integer overflow in ICU. * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL. * Low CVE-2017-15424: URL Spoof in Omnibox. * Low CVE-2017-15425: URL Spoof in Omnibox. * Low CVE-2017-15426: URL Spoof in Omnibox. * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox. - Rebase fix-gn-bootstrap.diff - Drop merged patches: * chromium-gcc5.patch * chromium-60.0.3112.113-breakpad-ucontext.patch * chromium-62.0.3202.62-correct-cplusplus-check.patch - Add new patches: * chromium-non-void-return.patch * chromium-gcc.patch - Version update to 62.0.3202.89 bsc#1066851: * CVE-2017-15398: Stack buffer overflow in QUIC Tomáš Chvátal 2017-12-07 09:45:49 +00:00
  • 5bb1432641 Accepting request 554955 from network:chromium Tomáš Chvátal 2017-12-07 09:41:26 +00:00
  • 5d05275c7c - BuildRequire nodejs8 instead of nodejs6 for suse_version >= 1330 Ismail Dönmez 2017-11-22 11:15:20 +00:00
  • 373a58ceed - Change BuildRequires: nodejs6 -> nodejs8 Ismail Dönmez 2017-11-22 11:07:02 +00:00
  • 0b99f8a35b Accepting request 542077 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2017-11-15 16:18:16 +00:00
  • 7adcdc5439 - Drop upstream merged chromium-sandbox.patch Tomáš Chvátal 2017-11-07 10:22:21 +00:00
  • 6aa8cfb260 - Version update to 62.0.3202.89 bsc#1066851: * CVE-2017-15398: Stack buffer overflow in QUIC * CVE-2017-15399: Use after free in V8 * CVE-2017-5126: Use after free in PDFium. * CVE-2017-5127: Use after free in PDFium. Tomáš Chvátal 2017-11-07 10:15:26 +00:00
  • c7736042bc - Restrict the version on jpeg to not waste build power Tomáš Chvátal 2017-11-03 12:39:28 +00:00
  • 8b708cf9e1 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1060 Tomáš Chvátal 2017-11-03 12:39:08 +00:00
  • 2ac5335e62 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1059 Tomáš Chvátal 2017-11-03 12:34:01 +00:00
  • c31be6590d - Add patch to fix sandbox crashes wrt bsc#1064298 * chromium-sandbox.patch Tomáš Chvátal 2017-10-29 08:19:31 +00:00
  • 3da49faeac - Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396 * CVE-2017-15396: Stack overflow in V8 Tomáš Chvátal 2017-10-27 09:48:14 +00:00
  • 4eacc2b325 Accepting request 536863 from home:AndreasStieger:branches:network:chromium Martin Pluskal 2017-10-26 12:56:36 +00:00
  • df4c254b07 - Try to export properly CXX/CC variable to fix leap builds Tomáš Chvátal 2017-10-26 09:18:32 +00:00
  • 6e4a4a2461 - Apply patch to fix building crc32 with gcc7: * chromium-62.0.3202.62-correct-cplusplus-check.patch Tomáš Chvátal 2017-10-25 18:04:17 +00:00
  • cc7a000878 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1051 Tomáš Chvátal 2017-10-19 03:37:01 +00:00
  • 715ce40753 - Update to 62.0.3202.62 bsc#1064066: * CVE-2017-5124: UXSS with MHTML. * CVE-2017-5125: Heap overflow in Skia. * CVE-2017-5126: Use after free in PDFium. * CVE-2017-5127: Use after free in PDFium. * CVE-2017-5128: Heap overflow in WebGL. * CVE-2017-5129: Use after free in WebAudio. * CVE-2017-5132: Incorrect stack manipulation in WebAssembly. * CVE-2017-5130: Heap overflow in libxml2. * CVE-2017-5131: Out of bounds write in Skia. * CVE-2017-5133: Out of bounds write in Skia. * CVE-2017-15386: UI spoofing in Blink. * CVE-2017-15387: Content security bypass. * CVE-2017-15388: Out of bounds read in Skia. * CVE-2017-15389: URL spoofing in OmniBox. * CVE-2017-15390: URL spoofing in OmniBox. * CVE-2017-15391: Extension limitation bypass in Extensions. * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration. * CVE-2017-15393: Referrer leak in Devtools. * CVE-2017-15394: URL spoofing in extensions UI. * CVE-2017-15395: Null pointer dereference in ImageCapture. - Drop unused patches: * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch * chromium-atk.patch * chromium-mojo-dep.patch * gcc60-fixes.diff * chromium-gcc5.patch * chromium-prop-codecs.patch * exclude_ymp.diff Tomáš Chvátal 2017-10-19 03:36:08 +00:00
  • 2aeab37e11 Accepting request 535086 from network:chromium Tomáš Chvátal 2017-10-19 03:26:36 +00:00
  • ef899b5aa6 Accepting request 528311 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2017-09-22 16:44:45 +00:00
  • 4b88001e12 - Update to 61.0.3163.91: * Various bugfixes Tomáš Chvátal 2017-09-16 15:53:50 +00:00
  • 1742663975 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1043 Tomáš Chvátal 2017-09-11 08:49:41 +00:00
  • 4c39ab9172 - Update to 61.0.3163.79 bsc#1057364: * CVE-2017-5111: Use after free in PDFium. * CVE-2017-5112: Heap buffer overflow in WebGL. * CVE-2017-5113: Heap buffer overflow in Skia. * CVE-2017-5114: Memory lifecycle issue in PDFium. * CVE-2017-5115: Type confusion in V8. * CVE-2017-5116: Type confusion in V8. * CVE-2017-5117: Use of uninitialized value in Skia. * CVE-2017-5118: Bypass of Content Security Policy in Blink. * CVE-2017-5119: Use of uninitialized value in Skia. * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation. - Rebase patch: * fix-gn-bootstrap.diff - Remove patches: * chromium-gcc7.patch * chromium-override.patch - Add new patches: * chromium-atk.patch * chromium-mojo-dep.patch - Gtk3 is hard required from now on - Version some of the required dependencies Tomáš Chvátal 2017-09-11 08:49:23 +00:00
  • 952102841c Accepting request 522990 from network:chromium Tomáš Chvátal 2017-09-11 08:41:09 +00:00
  • 512ed9c87f Accepting request 519244 from home:AndreasStieger:branches:network:chromium Martin Pluskal 2017-08-29 07:33:47 +00:00
  • 96e34578b4 - Version update to 60.0.3112.113: * Various bugfixes Tomáš Chvátal 2017-08-25 09:21:29 +00:00
  • cc0d156870 - Version update to 60.0.3112.101: * various usability bugfixes Tomáš Chvátal 2017-08-15 15:19:02 +00:00
  • 20c80ef46a - Version update to 60.0.3112.90: * Various usability bugfixes Tomáš Chvátal 2017-08-03 13:28:48 +00:00
  • 4b429d8108 - Add patch chromium-override.patch - Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch - Rebase patches: * chromium-dma-buf.patch * chromium-gcc7.patch * chromium-last-commit-position-r0.patch * fix-gn-bootstrap.diff Tomáš Chvátal 2017-07-26 13:46:38 +00:00
  • cc630b3598 - Version update to 60.0.3112.78 bsc#1050537: * CVE-2017-5091: Use after free in IndexedDB * CVE-2017-5092: Use after free in PPAPI * CVE-2017-5093: UI spoofing in Blink * CVE-2017-5094: Type confusion in extensions * CVE-2017-5095: Out-of-bounds write in PDFium * CVE-2017-5096: User information leak via Android intents * CVE-2017-5097: Out-of-bounds read in Skia * CVE-2017-5098: Use after free in V8 * CVE-2017-5099: Out-of-bounds write in PPAPI * CVE-2017-5100: Use after free in Chrome Apps * CVE-2017-5101: URL spoofing in OmniBox * CVE-2017-5102: Uninitialized use in Skia * CVE-2017-5103: Uninitialized use in Skia * CVE-2017-5104: UI spoofing in browser * CVE-2017-7000: Pointer disclosure in SQLite * CVE-2017-5105: URL spoofing in OmniBox * CVE-2017-5106: URL spoofing in OmniBox * CVE-2017-5107: User information leak via SVG * CVE-2017-5108: Type confusion in PDFium * CVE-2017-5109: UI spoofing in browser * CVE-2017-5110: UI spoofing in payments dialog * Various fixes from internal audits, fuzzing and other initiatives ------------------------------------------------------------------ - Update to 59.0.3071.115: * Various small fixes all around Tomáš Chvátal 2017-07-26 13:29:09 +00:00
  • 0d91434ecc Accepting request 512657 from network:chromium Tomáš Chvátal 2017-07-26 13:22:21 +00:00
  • 4739e3f874 - Update to 59.0.3071.115: * Various small fixes all around Tomáš Chvátal 2017-06-28 19:39:30 +00:00
  • 466c0f2b3f Accepting request 505888 from home:AndreasStieger:branches:network:chromium Martin Pluskal 2017-06-23 20:41:02 +00:00
  • 4f7615aff8 Accepting request 504191 from home:AndreasStieger:branches:network:chromium Tomáš Chvátal 2017-06-16 12:44:22 +00:00
  • e8327f3f48 - Add patch chromium-buildname.patch bsc#1043420 Tomáš Chvátal 2017-06-08 14:57:02 +00:00
  • 130d58e755 - Update to 59.0.3071.86 bsc#1042833: * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16 * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26 * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07 * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28 * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09 * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05 * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16 * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06 * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28 * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12 * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20 * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05 * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07 * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11 * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24 * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15 - Add patch to fix build with system dma: * chromium-dma-buf.patch - Drop no longer needed patches: * chromium-linker-memory.patch * chromium-system-jinja-r13.patch - Refresh patches: * chromium-gcc7.patch * chromium-system-ffmpeg-r3.patch * fix-gn-bootstrap.diff - Use bundled libxml * Upstream unfortunately uses git snapshot that is not api/abi compatible - Add patch for fpermissive build error: - Version update to 58.0.3029.110: Tomáš Chvátal 2017-06-06 07:56:54 +00:00
  • 8d407edf70 Accepting request 501294 from network:chromium Tomáš Chvátal 2017-06-06 07:50:04 +00:00
  • b6c0d58d2d - Add patch for fpermissive build error: * chromium-fpermissive.patch Tomáš Chvátal 2017-06-05 15:25:08 +00:00
  • 49d21c2475 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1018 Tomáš Chvátal 2017-06-05 14:38:32 +00:00
  • b88cdac653 - Add patch to build with gcc7: * chromium-gcc7.patch Tomáš Chvátal 2017-06-05 13:09:43 +00:00
  • cc0700e843 - Version update to 58.0.3029.110: * Various small bugfixes Tomáš Chvátal 2017-05-10 07:45:10 +00:00