424e1509ad
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00
06c600edf4
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00
cbe50521f3
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration
Tomáš Chvátal
2019-10-24 12:43:53 +00:00
b29718b3df
- Adjust LDFLAGS settings for LTO to take memory-constraints into consideration
Tomáš Chvátal
2019-10-24 12:43:53 +00:00
4f10c7fda3
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch
Tomáš Chvátal
2019-10-23 13:10:24 +00:00
20718ecae2
- Update to 78.0.3904.70 bsc#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Add patches: * chromium-78-gcc-enum-range.patch * chromium-78-gcc-noexcept.patch * chromium-78-gcc-std-vector.patch * chromium-78-icon.patch * chromium-78-include.patch * chromium-78-noexcept.patch
Tomáš Chvátal
2019-10-23 13:10:24 +00:00
f3e1596bc9
Accepting request 742142 from network:chromium
Tomáš Chvátal
2019-10-23 13:00:30 +00:00
ef12afcdac
Accepting request 742142 from network:chromium
Tomáš Chvátal
2019-10-23 13:00:30 +00:00
4f9334b38f
Accepting request 741097 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2019-10-18 17:48:19 +00:00
6840838634
Accepting request 741097 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2019-10-18 17:48:19 +00:00
7d471af686
- Update to 77.0.3865.120 bsc#1153660: * CVE-2019-13693: Use-after-free in IndexedDB * CVE-2019-13694: Use-after-free in WebRTC * CVE-2019-13695: Use-after-free in audio * CVE-2019-13696: Use-after-free in V8 * CVE-2019-13697: Cross-origin size leak. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-10-11 08:23:36 +00:00
0f37af0f01
- Update to 77.0.3865.120 bsc#1153660: * CVE-2019-13693: Use-after-free in IndexedDB * CVE-2019-13694: Use-after-free in WebRTC * CVE-2019-13695: Use-after-free in audio * CVE-2019-13696: Use-after-free in V8 * CVE-2019-13697: Cross-origin size leak. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-10-11 08:23:36 +00:00
92cf02edc4
Accepting request 732023 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-09-20 05:56:20 +00:00
a179617a6c
Accepting request 732023 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-09-20 05:56:20 +00:00
1d593c56ab
Accepting request 731818 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-09-19 07:25:39 +00:00
c829292448
Accepting request 731818 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-09-19 07:25:39 +00:00
e3827e157e
- Add patch from Fedora for cert transparency: * chromium-77.0.3865.75-certificate-transparency.patch
Tomáš Chvátal
2019-09-16 09:13:00 +00:00
78b01531eb
- Add patch from Fedora for cert transparency: * chromium-77.0.3865.75-certificate-transparency.patch
Tomáš Chvátal
2019-09-16 09:13:00 +00:00
062c393977
- Update to chromium 77.0.3865.75 bsc#1150425: * CVE-2019-5870: Use-after-free in media * CVE-2019-5871: Heap overflow in Skia * CVE-2019-5872: Use-after-free in Mojo * CVE-2019-5874: External URIs may trigger other browsers * CVE-2019-5875: URL bar spoof via download redirect * CVE-2019-5876: Use-after-free in media * CVE-2019-5877: Out-of-bounds access in V8 * CVE-2019-5878: Use-after-free in V8 * CVE-2019-5879: Extension can bypass same origin policy * CVE-2019-5880: SameSite cookie bypass * CVE-2019-5881: Arbitrary read in SwiftShader * CVE-2019-13659: URL spoof * CVE-2019-13660: Full screen notification overlap * CVE-2019-13661: Full screen notification spoof * CVE-2019-13662: CSP bypass * CVE-2019-13663: IDN spoof * CVE-2019-13664: CSRF bypass * CVE-2019-13665: Multiple file download protection bypass * CVE-2019-13666: Side channel using storage size estimate * CVE-2019-13667: URI bar spoof when using external app URIs * CVE-2019-13668: Global window leak via console * CVE-2019-13669: HTTP authentication spoof * CVE-2019-13670: V8 memory corruption in regex * CVE-2019-13671: Dialog box fails to show origin * CVE-2019-13673: Cross-origin information leak using devtools * CVE-2019-13674: IDN spoofing * CVE-2019-13675: Extensions can be disabled by trailing slash * CVE-2019-13676: Google URI shown for certificate warning * CVE-2019-13677: Chrome web store origin needs to be isolated
Tomáš Chvátal
2019-09-12 08:57:02 +00:00
70b2c7503b
- Update to chromium 77.0.3865.75 bsc#1150425: * CVE-2019-5870: Use-after-free in media * CVE-2019-5871: Heap overflow in Skia * CVE-2019-5872: Use-after-free in Mojo * CVE-2019-5874: External URIs may trigger other browsers * CVE-2019-5875: URL bar spoof via download redirect * CVE-2019-5876: Use-after-free in media * CVE-2019-5877: Out-of-bounds access in V8 * CVE-2019-5878: Use-after-free in V8 * CVE-2019-5879: Extension can bypass same origin policy * CVE-2019-5880: SameSite cookie bypass * CVE-2019-5881: Arbitrary read in SwiftShader * CVE-2019-13659: URL spoof * CVE-2019-13660: Full screen notification overlap * CVE-2019-13661: Full screen notification spoof * CVE-2019-13662: CSP bypass * CVE-2019-13663: IDN spoof * CVE-2019-13664: CSRF bypass * CVE-2019-13665: Multiple file download protection bypass * CVE-2019-13666: Side channel using storage size estimate * CVE-2019-13667: URI bar spoof when using external app URIs * CVE-2019-13668: Global window leak via console * CVE-2019-13669: HTTP authentication spoof * CVE-2019-13670: V8 memory corruption in regex * CVE-2019-13671: Dialog box fails to show origin * CVE-2019-13673: Cross-origin information leak using devtools * CVE-2019-13674: IDN spoofing * CVE-2019-13675: Extensions can be disabled by trailing slash * CVE-2019-13676: Google URI shown for certificate warning * CVE-2019-13677: Chrome web store origin needs to be isolated
Tomáš Chvátal
2019-09-12 08:57:02 +00:00
b2db6ea0e8
Accepting request 730294 from network:chromium
Tomáš Chvátal
2019-09-12 07:25:11 +00:00
9e1a95c235
Accepting request 730294 from network:chromium
Tomáš Chvátal
2019-09-12 07:25:11 +00:00
ae4cdf05ae
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch
Tomáš Chvátal
2019-09-03 16:16:26 +00:00
85399a72d4
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch
Tomáš Chvátal
2019-09-03 16:16:26 +00:00
6301f0fb95
- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869: * CVE-2019-5869: Use-after-free in Blink * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-09-03 12:56:07 +00:00
b86692a4bc
- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869: * CVE-2019-5869: Use-after-free in Blink * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-09-03 12:56:07 +00:00
73d6a2ce12
Accepting request 725081 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-08-21 14:08:35 +00:00
9854ba42da
Accepting request 725081 from home:jritzerfeld:branches:network:chromium
Tomáš Chvátal
2019-08-21 14:08:35 +00:00
7cfe3d007a
- Update to 76.0.3809.100 bsc#1145242: * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction * CVE-2019-5867: Out-of-bounds read in V8
Tomáš Chvátal
2019-08-12 11:41:09 +00:00
9dd27a7e0d
- Update to 76.0.3809.100 bsc#1145242: * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction * CVE-2019-5867: Out-of-bounds read in V8
Tomáš Chvátal
2019-08-12 11:41:09 +00:00
bb9b57d774
* chromium-fix-char_traits.patch bsc#1144625
Tomáš Chvátal
2019-08-08 10:53:25 +00:00
10ce340982
* chromium-fix-char_traits.patch bsc#1144625
Tomáš Chvátal
2019-08-08 10:53:25 +00:00
a1b7732dde
- Add patches to fix few compilation issues: * chromium-angle-inline.patch * chromium-compiler-flags.patch * chromium-fix-char_traits.patch - Disable various gcc warnings as upstream does not care and it just bloats the buildlog (from debian) - Update to 76.0.3809.87 bsc#1143492:
Tomáš Chvátal
2019-08-08 07:28:13 +00:00
00d193b060
- Add patches to fix few compilation issues: * chromium-angle-inline.patch * chromium-compiler-flags.patch * chromium-fix-char_traits.patch - Disable various gcc warnings as upstream does not care and it just bloats the buildlog (from debian) - Update to 76.0.3809.87 bsc#1143492:
Tomáš Chvátal
2019-08-08 07:28:13 +00:00
4a11543810
Change -Wno-error=return-type to -Wno-return-type to allow build in openSUSE:Leap.
Martin Liška
2019-08-02 09:53:48 +00:00
2a4c952191
Change -Wno-error=return-type to -Wno-return-type to allow build in openSUSE:Leap.
Martin Liška
2019-08-02 09:53:48 +00:00
450218a17b
- Update to 76.0.3809.87: * CVE-2019-5850: Use-after-free in offline page fetcher * CVE-2019-5860: Use-after-free in PDFium * CVE-2019-5853: Memory corruption in regexp length check * CVE-2019-5851: Use-after-poison in offline audio context * CVE-2019-5859: res: URIs can load alternative browsers * CVE-2019-5856: Insufficient checks on filesystem: URI permissions * CVE-2019-5855: Integer overflow in PDFium * CVE-2019-5865: Site isolation bypass from compromised renderer * CVE-2019-5858: Insufficient filtering of Open URL service parameters * CVE-2019-5864: Insufficient port filtering in CORS for extensions * CVE-2019-5862: AppCache not robust to compromised renderers * CVE-2019-5861: Click location incorrectly checked * CVE-2019-5857: Comparison of -0 and null yields crash * CVE-2019-5854: Integer overflow in PDFium text rendering * CVE-2019-5852: Object leak of utility functions * Various fixes from internal audits, fuzzing and other initiatives * Not affected: + CVE-2019-5863: Use-after-free in WebUSB on Windows - Added patches: * chromium-76-gcc-ambiguous-nodestructor.patch * chromium-76-gcc-blink-constexpr.patch * chromium-76-gcc-blink-namespace1.patch * chromium-76-gcc-blink-namespace2.patch * chromium-76-gcc-gl-init.patch * chromium-76-gcc-include.patch * chromium-76-gcc-noexcept.patch * chromium-76-gcc-private.patch * chromium-76-gcc-pure-virtual.patch * chromium-76-gcc-uint32.patch
Tomáš Chvátal
2019-08-02 08:44:07 +00:00
9342b98e3d
- Update to 76.0.3809.87: * CVE-2019-5850: Use-after-free in offline page fetcher * CVE-2019-5860: Use-after-free in PDFium * CVE-2019-5853: Memory corruption in regexp length check * CVE-2019-5851: Use-after-poison in offline audio context * CVE-2019-5859: res: URIs can load alternative browsers * CVE-2019-5856: Insufficient checks on filesystem: URI permissions * CVE-2019-5855: Integer overflow in PDFium * CVE-2019-5865: Site isolation bypass from compromised renderer * CVE-2019-5858: Insufficient filtering of Open URL service parameters * CVE-2019-5864: Insufficient port filtering in CORS for extensions * CVE-2019-5862: AppCache not robust to compromised renderers * CVE-2019-5861: Click location incorrectly checked * CVE-2019-5857: Comparison of -0 and null yields crash * CVE-2019-5854: Integer overflow in PDFium text rendering * CVE-2019-5852: Object leak of utility functions * Various fixes from internal audits, fuzzing and other initiatives * Not affected: + CVE-2019-5863: Use-after-free in WebUSB on Windows - Added patches: * chromium-76-gcc-ambiguous-nodestructor.patch * chromium-76-gcc-blink-constexpr.patch * chromium-76-gcc-blink-namespace1.patch * chromium-76-gcc-blink-namespace2.patch * chromium-76-gcc-gl-init.patch * chromium-76-gcc-include.patch * chromium-76-gcc-noexcept.patch * chromium-76-gcc-private.patch * chromium-76-gcc-pure-virtual.patch * chromium-76-gcc-uint32.patch
Tomáš Chvátal
2019-08-02 08:44:07 +00:00
7ad90e63dd
Accepting request 720533 from network:chromium
Tomáš Chvátal
2019-08-02 08:37:13 +00:00
0af6a94f1e
Accepting request 720533 from network:chromium
Tomáš Chvátal
2019-08-02 08:37:13 +00:00