ba6a4f9b9d
- Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue, update patch:
Tomáš Chvátal
2020-06-23 15:08:32 +00:00
144596c044
- Try to fix the linking issue on leap same way like Debian: * no-location-leap151.patch bsc#1173254
Tomáš Chvátal
2020-06-23 14:25:06 +00:00
ca7a807bcb
- Add patch from Fedora to avoid attribute overrides in skia: * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
Tomáš Chvátal
2020-06-23 08:35:29 +00:00
e2b44c97ec
- Add patch to hopefully fix bsc#1173107: * chromium-dev-shm.patch - Disable wayland integration on 15.x bsc#1173187 bsc#1173188
Tomáš Chvátal
2020-06-23 08:12:38 +00:00
7fb41ca3c3
- Update to 83.0.4103.116 bsc#1173251: * CVE-2020-6509: Use after free in extensions
Tomáš Chvátal
2020-06-23 07:52:48 +00:00
5dec0f252e
- Reduce constraints to say 20 GB disk space is enough
Tomáš Chvátal
2020-06-19 07:35:18 +00:00
f8cc522a53
- Disable wayland integration on 15.1
Tomáš Chvátal
2020-06-19 07:13:55 +00:00
40851541f0
- Enforce to not use system borders bsc#1173063
Tomáš Chvátal
2020-06-18 07:41:06 +00:00
ff191b5175
- Update to 83.0.4103.106 bsc#1173029: * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8
Tomáš Chvátal
2020-06-17 08:48:47 +00:00
0ba5e4b5ff
- Another attempt on the location handling for Leap 15.1: * no-location-leap151.patch
Tomáš Chvátal
2020-06-15 14:06:03 +00:00
c2a1213a6c
- Attempt to build with wayland/ozone enabled
Tomáš Chvátal
2020-06-11 16:32:15 +00:00
9fe70a6c9b
- Enable more system libs on 15.2+ - Remove the chromium-83-gcc-location-revert.patch as it is wrong approach to fix the problem
Tomáš Chvátal
2020-06-11 12:16:30 +00:00
182bd6c0a9
- Update _constraints to match up LTO enablement
Tomáš Chvátal
2020-06-11 09:05:22 +00:00
ecd7a186ec
- With GCC 10 released we should be able to enable LTO again
Tomáš Chvátal
2020-06-10 12:23:53 +00:00
c8c169d74f
* chromium-norar.patch
Tomáš Chvátal
2020-06-04 06:56:08 +00:00
b86087dc8d
- Update to 83.0.4103.97 bsc#1172496: * CVE-2020-6493: Use after free in WebAuthentication. * CVE-2020-6494: Incorrect security UI in payments. * CVE-2020-6495: Insufficient policy enforcement in developer tools. * CVE-2020-6496: Use after free in payments.
Tomáš Chvátal
2020-06-04 06:30:18 +00:00
d1c8ae190c
- Update to 83.0.4103.61 bsc#1171910: * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21 * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26 * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06 * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30 * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02 * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Michał Bentkowski of Securitum on 2020-03-30 * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08 * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25 * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06 * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07 * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31 * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18 * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26 * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24 * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14 * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21 * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07 * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17 * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23 * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26 * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30 * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24 * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06 * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21 * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10 * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19 * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07 - Rebase patch: * chromium-vaapi.patch
Tomáš Chvátal
2020-05-20 10:20:10 +00:00
2abdd645d3
Accepting request 807553 from network:chromium
Tomáš Chvátal
2020-05-20 09:32:57 +00:00
a2ab999578
- update to 81.0.4044.138 bsc#1171247: * CVE-2020-6831: Stack buffer overflow in SCTP * CVE-2020-6464: Type Confusion in Blink.
Tomáš Chvátal
2020-05-06 07:56:16 +00:00
9cd010023e
Accepting request 800274 from home:namtrac:branches:network:chromium
Tomáš Chvátal
2020-05-05 08:18:03 +00:00
1879208d0d
Accepting request 798873 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-04-29 11:58:02 +00:00
b10b70b82d
Accepting request 798595 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-04-28 09:27:26 +00:00
03ac78616f
Accepting request 796156 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-04-22 06:12:49 +00:00
f986023750
- Update to 81.0.4044.113 bsc#1169729: * CVE-2020-6457: Use after free in speech recognizer
Tomáš Chvátal
2020-04-17 08:17:14 +00:00
2a0916e1d9
- Update to 81.0.4044.92 bsc#1168911: * CVE-2020-6454: Use after free in extensions * CVE-2020-6423: Use after free in audio * CVE-2020-6455: Out of bounds read in WebSQL * CVE-2020-6430: Type Confusion in V8 * CVE-2020-6456: Insufficient validation of untrusted input in clipboard * CVE-2020-6431: Insufficient policy enforcement in full screen * CVE-2020-6432: Insufficient policy enforcement in navigations * CVE-2020-6433: Insufficient policy enforcement in extensions * CVE-2020-6434: Use after free in devtools * CVE-2020-6435: Insufficient policy enforcement in extensions * CVE-2020-6436: Use after free in window management * CVE-2020-6437: Inappropriate implementation in WebView * CVE-2020-6438: Insufficient policy enforcement in extensions * CVE-2020-6439: Insufficient policy enforcement in navigations * CVE-2020-6440: Inappropriate implementation in extensions * CVE-2020-6441: Insufficient policy enforcement in omnibox * CVE-2020-6442: Inappropriate implementation in cache * CVE-2020-6443: Insufficient data validation in developer tools * CVE-2020-6444: Uninitialized Use in WebRTC * CVE-2020-6445: Insufficient policy enforcement in trusted types * CVE-2020-6446: Insufficient policy enforcement in trusted types * CVE-2020-6447: Inappropriate implementation in developer tools * CVE-2020-6448: Use after free in V8 - Add new patches: * chromium-81-gcc-constexpr.patch * chromium-81-gcc-noexcept.patch * fix-vaapi-with-glx.patch - Remove no longer needed patches: * chromium-80-gcc-abstract.patch
Tomáš Chvátal
2020-04-08 08:45:00 +00:00
75a9b604bc
Accepting request 792360 from network:chromium
Tomáš Chvátal
2020-04-08 08:38:34 +00:00
0aa1e8d993
- Update to 80.0.3987.162 bsc#1168421: * CVE-2020-6450: Use after free in WebAudio. * CVE-2020-6451: Use after free in WebAudio. * CVE-2020-6452: Heap buffer overflow in media.
Tomáš Chvátal
2020-04-02 09:42:43 +00:00
2c4b5dd583
Accepting request 789463 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-03-29 14:45:43 +00:00
20c8b35373
Accepting request 789366 from home:marxin:branches:network:chromium
Tomáš Chvátal
2020-03-29 07:06:06 +00:00
1f0dc58d06
Accepting request 789070 from home:hellcp:branches:network:chromium
Tomáš Chvátal
2020-03-27 15:15:58 +00:00
33bdf69138
Accepting request 787802 from home:alarrosa:branches:network:chromium
Tomáš Chvátal
2020-03-24 13:22:18 +00:00
2237d02dd2
- Update to 80.0.3987.149: * High CVE-2020-6422: Use after free in WebGL. * High CVE-2020-6424: Use after free in media. * High CVE-2020-6425: Insufficient policy enforcement in extensions. * High CVE-2020-6426: Inappropriate implementation in V8. * High CVE-2020-6427: Use after free in audio. * High CVE-2020-6428: Use after free in audio. * High CVE-2020-6429: Use after free in audio. * High CVE-2019-20503: Out of bounds read in usersctplib. * High CVE-2020-6449: Use after free in audio. * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2020-03-19 11:27:49 +00:00
77b439a6c0
- Do not pull in python deps except interpreter, the bundles are patched anwyays
Tomáš Chvátal
2020-03-14 09:18:59 +00:00
592abf4abe
- Update to 80.0.3987.132 bsc#1165826: * CVE-2020-6420: Insufficient policy enforcement in media. * Various fixes from internal audits, fuzzing and other initiatives [2].
Tomáš Chvátal
2020-03-05 18:33:34 +00:00
9ca4de86e1
- Add patch trying to fix pulse audio issues with webrtc: * webrtc-pulse.patch
Tomáš Chvátal
2020-03-03 16:48:39 +00:00
94fb5eb74a
- Update to 80.0.3987.122 bsc#1164828: * CVE-2020-6418: Type confusion in V8 * CVE-2020-6407: Out of bounds memory access in streams. * Integer overflow in ICU
Tomáš Chvátal
2020-02-25 13:43:08 +00:00
96c5a8a1e2
- Add chromedriver binary to bindir
Tomáš Chvátal
2020-02-17 12:19:26 +00:00
bf1749a8ee
- Drop sandbox binary as it should not be needed really bsc#1163588 - Remove unused patch: * chromium-sandbox-pie.patch
Tomáš Chvátal
2020-02-13 14:52:49 +00:00
8ddf0d5784
- Update to 80.0.3987.100 bsc#1163484: * feature fixes only
Tomáš Chvátal
2020-02-12 13:31:36 +00:00
56c725c5af
- Update to 80.0.3987.87 bsc#1162833: * CVE-2020-6381: Integer overflow in JavaScript * CVE-2020-6382: Type Confusion in JavaScript * CVE-2019-18197: Multiple vulnerabilities in XML * CVE-2019-19926: Inappropriate implementation in SQLite * CVE-2020-6385: Insufficient policy enforcement in storage * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite * CVE-2020-6387: Out of bounds write in WebRTC * CVE-2020-6388: Out of bounds memory access in WebAudio * CVE-2020-6389: Out of bounds write in WebRTC * CVE-2020-6390: Out of bounds memory access in streams * CVE-2020-6391: Insufficient validation of untrusted input in Blink * CVE-2020-6392: Insufficient policy enforcement in extensions * CVE-2020-6393: Insufficient policy enforcement in Blink * CVE-2020-6394: Insufficient policy enforcement in Blink * CVE-2020-6395: Out of bounds read in JavaScript * CVE-2020-6396: Inappropriate implementation in Skia * CVE-2020-6397: Incorrect security UI in sharing * CVE-2020-6398: Uninitialized use in PDFium * CVE-2020-6399: Insufficient policy enforcement in AppCache * CVE-2020-6400: Inappropriate implementation in CORS * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox * CVE-2020-6402: Insufficient policy enforcement in downloads * CVE-2020-6403: Incorrect security UI in Omnibox * CVE-2020-6404: Inappropriate implementation in Blink * CVE-2020-6405: Out of bounds read in SQLite * CVE-2020-6406: Use after free in audio * CVE-2019-19923: Out of bounds memory access in SQLite * CVE-2020-6408: Insufficient policy enforcement in CORS * CVE-2020-6409: Inappropriate implementation in Omnibox
Tomáš Chvátal
2020-02-05 13:12:40 +00:00
6b33d30618
Accepting request 770266 from network:chromium
Tomáš Chvátal
2020-02-05 13:08:00 +00:00
72cc1b1e68
Accepting request 765546 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2020-01-19 14:40:57 +00:00
7ee331de96
* CVE-2020-6377: Use after free in audio
Tomáš Chvátal
2020-01-09 13:32:48 +00:00
a170053757
- Update to 79.0.3945.117 bsc#1160337: * CVE-TBD: Use after free in audio * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2020-01-08 07:56:01 +00:00
9c994b1622
* CVE-2019-5844 CVE-2019-5845 CVE-2019-5846
Tomáš Chvátal
2020-01-07 08:20:40 +00:00
16d4bb5632
Accepting request 760085 from home:StefanBruens:branches:network:chromium
Martin Pluskal2019-12-31 08:29:34 +00:00
61f3e0be22
Accepting request 758422 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-12-21 12:39:34 +00:00
39ae7f8042
- Update to 79.0.3945.79: * CVE-2019-13725: Use after free in Bluetooth * CVE-2019-13726: Heap buffer overflow in password manager * CVE-2019-13727: Insufficient policy enforcement in WebSockets * CVE-2019-13728: Out of bounds write in V8 * CVE-2019-13729: Use after free in WebSockets * CVE-2019-13730: Type Confusion in V8 * CVE-2019-13732: Use after free in WebAudio * CVE-2019-13734: Out of bounds write in SQLite * CVE-2019-13735: Out of bounds write in V8 * CVE-2019-13764: Type Confusion in V8 * CVE-2019-13736: Integer overflow in PDFium * CVE-2019-13737: Insufficient policy enforcement in autocomplete * CVE-2019-13738: Insufficient policy enforcement in navigation * CVE-2019-13739: Incorrect security UI in Omnibox * CVE-2019-13740: Incorrect security UI in sharing * CVE-2019-13741: Insufficient validation of untrusted input in Blink * CVE-2019-13742: Incorrect security UI in Omnibox * CVE-2019-13743: Incorrect security UI in external protocol handling * CVE-2019-13744: Insufficient policy enforcement in cookies * CVE-2019-13745: Insufficient policy enforcement in audio * CVE-2019-13746: Insufficient policy enforcement in Omnibox * CVE-2019-13747: Uninitialized Use in rendering * CVE-2019-13748: Insufficient policy enforcement in developer tools * CVE-2019-13749: Incorrect security UI in Omnibox * CVE-2019-13750: Insufficient data validation in SQLite * CVE-2019-13751: Uninitialized Use in SQLite * CVE-2019-13752: Out of bounds read in SQLite * CVE-2019-13753: Out of bounds read in SQLite * CVE-2019-13754: Insufficient policy enforcement in extensions
Tomáš Chvátal
2019-12-11 09:37:24 +00:00
b762e358e8
Accepting request 755755 from network:chromium
Tomáš Chvátal
2019-12-11 09:26:30 +00:00
df4f09f5f1
- Update to 78.0.3904.108 bsc#1157269: * CVE-2019-13723: Use-after-free in Bluetooth * CVE-2019-13724: Out-of-bounds access in Bluetooth * Various fixes from internal audits, fuzzing and other initiatives
Tomáš Chvátal
2019-11-20 10:55:56 +00:00
4d146ae8b0
Accepting request 749197 from home:Guillaume_G:branches:network:chromium
Tomáš Chvátal
2019-11-18 08:27:43 +00:00
3140c369c8
Accepting request 746592 from home:AndreasStieger:branches:network:chromium
Tomáš Chvátal
2019-11-08 13:10:55 +00:00
724b995ae1
Accepting request 746208 from network:chromium
Tomáš Chvátal
2019-11-07 10:15:42 +00:00
9f3461d90a
Accepting request 746208 from network:chromium
Tomáš Chvátal
2019-11-07 10:15:42 +00:00
424e1509ad
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00
06c600edf4
- Disable LTO for now as it consumes ~20GB of RAM, we will reenable the feature later when some memory consumption fixes land in GCC
Tomáš Chvátal
2019-10-25 10:51:19 +00:00