INSTALL.sh

@@ -120,6 +120,14 @@ if [ -f "${OUTPUTDIR}/libqt6_shim.so" ]; then
   install -m ${SHLIB_PERMS} "${buildfile}" "${STAGEDIR}/${INSTALLDIR}/${file}"
 fi
 
+# FFMPEG (if using the bundled one)
+if [ -f "${OUTPUTDIR}/libffmpeg.so" ]; then
+    file="libffmpeg.so"
+    buildfile="${OUTPUTDIR}/${file}"
+    install -m ${SHLIB_PERMS} "${buildfile}" "${STAGEDIR}/${INSTALLDIR}/${file}"
+fi
+
+
 # default apps
 if [ -d "${OUTPUTDIR}/default_apps" ]; then
     cp -a "${OUTPUTDIR}/default_apps" "${STAGEDIR}/${INSTALLDIR}/"

chromium.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Wed Aug 27 12:12:26 CEST 2025 - ro@suse.de
+
+- Chromium 139.0.7258.154 (boo#1248769)
+  * CVE-2025-9478: Use after free in ANGLE
+
+-------------------------------------------------------------------
+Tue Aug 19 21:07:41 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.138 (boo#1248315):
+  * CVE-2025-9132: Out of bounds write in V8
+
+-------------------------------------------------------------------
+Wed Aug 13 04:21:07 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.127 (boo#1247981):
+  * CVE-2025-8879: Heap buffer overflow in libaom
+  * CVE-2025-8880: Race in V8
+  * CVE-2025-8901: Out of bounds write in ANGLE
+  * CVE-2025-8881: Inappropriate implementation in File Picker
+  * CVE-2025-8882: Use after free in Aura
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+-------------------------------------------------------------------
+Thu Aug  7 15:48:37 CEST 2025 - ro@suse.de
+
+- really install libffmpeg.so if using the bundled one 
+  and block the extra dependency
+
 -------------------------------------------------------------------
 Wed Aug  6 12:47:40 CEST 2025 - ro@suse.de
 

chromium.spec

@@ -22,6 +22,7 @@
 %define outputdir out
 # bsc#1108175
 %define __provides_exclude ^lib.*\\.so.*$
+%define __requires_exclude ^libffmpeg\\.so.*$
 # suse_version 1500 all of sle code 15, all of leap15
 # suse_version 1600 all of alp, slfo
 # suse_version 1699 tw
@@ -111,7 +112,7 @@
 %global official_build 1
 
 Name:           chromium%{n_suffix}
-Version:        139.0.7258.66
+Version:        139.0.7258.154
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later