Callum Farmer
45889599ac
hi, currently only tumbleweed builds! 15.2 has some libva issues. - Chromium 90.0.4430.85 (boo#1185047): * CVE-2021-21222: Heap buffer overflow in V8 * CVE-2021-21223: Integer overflow in Mojo * CVE-2021-21224: Type Confusion in V8 * CVE-2021-21225: Out of bounds memory access in V8 * CVE-2021-21226: Use after free in navigation - Chromium 90.0.4430.72 (boo#1184764): * CVE-2021-21201: Use after free in permissions * CVE-2021-21202: Use after free in extensions * CVE-2021-21203: Use after free in Blink * CVE-2021-21204: Use after free in Blink * CVE-2021-21205: Insufficient policy enforcement in navigation * CVE-2021-21221: Insufficient validation of untrusted input in Mojo * CVE-2021-21207: Use after free in IndexedDB * CVE-2021-21208: Insufficient data validation in QR scanner * CVE-2021-21209: Inappropriate implementation in storage * CVE-2021-21210: Inappropriate implementation in Network * CVE-2021-21211: Inappropriate implementation in Navigatio * CVE-2021-21212: Incorrect security UI in Network Config UI * CVE-2021-21213: Use after free in WebMIDI * CVE-2021-21214: Use after free in Network API * CVE-2021-21215: Inappropriate implementation in Autofill * CVE-2021-21216: Inappropriate implementation in Autofill * CVE-2021-21217: Uninitialized Use in PDFium * CVE-2021-21218: Uninitialized Use in PDFium * CVE-2021-21219: Uninitialized Use in PDFiu * drop chromium-89-quiche-private.patch * drop chromium-89-quiche-dcheck.patch * drop chromium-89-skia-CropRect.patch * drop chromium-89-dawn-include.patch OBS-URL: https://build.opensuse.org/request/show/888692 OBS-URL: https://build.opensuse.org/package/show/network:chromium/chromium?expand=0&rev=1538
49 lines
1.3 KiB
Diff
49 lines
1.3 KiB
Diff
--- chromium-90.0.4430.85/mojo/core/channel_linux.cc.xx 2021-04-26 10:31:10.188705842 +0200
|
|
+++ chromium-90.0.4430.85/mojo/core/channel_linux.cc 2021-04-26 11:23:26.997161282 +0200
|
|
@@ -5,6 +5,21 @@
|
|
#include "mojo/core/channel_linux.h"
|
|
|
|
#include <fcntl.h>
|
|
+#ifndef F_SEAL_SEAL
|
|
+# define F_SEAL_SEAL 0x0001
|
|
+#endif
|
|
+#ifndef F_SEAL_SHRINK
|
|
+# define F_SEAL_SHRINK 0x0002
|
|
+#endif
|
|
+#ifndef F_SEAL_GROW
|
|
+# define F_SEAL_GROW 0x0004
|
|
+#endif
|
|
+#ifndef F_ADD_SEALS
|
|
+# define F_ADD_SEALS 1033
|
|
+#endif
|
|
+#ifndef F_GET_SEALS
|
|
+# define F_GET_SEALS 1034
|
|
+#endif
|
|
#include <linux/futex.h>
|
|
#include <linux/memfd.h>
|
|
#include <sys/eventfd.h>
|
|
--- chromium-90.0.4430.85/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc.xx 2021-04-26 16:39:18.387482941 +0200
|
|
+++ chromium-90.0.4430.85/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc 2021-04-26 16:40:10.866754337 +0200
|
|
@@ -6,6 +6,21 @@
|
|
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
+#ifndef F_SEAL_SEAL
|
|
+# define F_SEAL_SEAL 0x0001
|
|
+#endif
|
|
+#ifndef F_SEAL_SHRINK
|
|
+# define F_SEAL_SHRINK 0x0002
|
|
+#endif
|
|
+#ifndef F_SEAL_GROW
|
|
+# define F_SEAL_GROW 0x0004
|
|
+#endif
|
|
+#ifndef F_ADD_SEALS
|
|
+# define F_ADD_SEALS 1033
|
|
+#endif
|
|
+#ifndef F_GET_SEALS
|
|
+# define F_GET_SEALS 1034
|
|
+#endif
|
|
#include <linux/net.h>
|
|
#include <sched.h>
|
|
#include <signal.h>
|