Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2026-03-25 21:17:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.8177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Wed Mar 25 21:17:43 2026 rev:510 rq:1342207 version:146.0.7680.164 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2026-03-22 14:12:28.602109925 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new.8177/chromium.changes 2026-03-27 06:37:34.440469030 +0100 @@ -1,0 +2,16 @@ +Mon Mar 23 23:11:40 UTC 2026 - Ruediger Oertel <[email protected]> + +- Chromium 146.0.7680.164 (boo#1260376) + * CVE-2026-4673: Heap buffer overflow in WebAudio + * CVE-2026-4674: Out of bounds read in CSS + * CVE-2026-4675: Heap buffer overflow in WebGL + * CVE-2026-4676: Use after free in Dawn + * CVE-2026-4677: Out of bounds read in WebAudio + * CVE-2026-4678: Use after free in WebGPU + * CVE-2026-4679: Integer overflow in Fonts + * CVE-2026-4680: Use after free in FedCM +- added patches: + * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch + (upstream compile fix for blink on non-x86,non-arm) + +------------------------------------------------------------------- Old: ---- chromium-146.0.7680.153-linux.tar.xz New: ---- chromium-146.0.7680.164-linux.tar.xz chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch ----------(New B)---------- New:- added patches: * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream compile fix for blink on non-x86,non-arm) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.aXT1tw/_old 2026-03-27 06:37:45.336918135 +0100 +++ /var/tmp/diff_new_pack.aXT1tw/_new 2026-03-27 06:37:45.340918300 +0100 @@ -132,7 +132,7 @@ %global official_build 1 Name: chromium%{n_suffix} -Version: 146.0.7680.153 +Version: 146.0.7680.164 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -265,6 +265,8 @@ Patch550: ppc-chromium-136-clang-config.patch # from debian Patch551: ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch +# local +Patch580: chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch # conditionally applied patches # patch where libxml < 2.12 Patch1010: chromium-124-system-libxml.patch ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.aXT1tw/_old 2026-03-27 06:37:45.488924400 +0100 +++ /var/tmp/diff_new_pack.aXT1tw/_new 2026-03-27 06:37:45.492924565 +0100 @@ -1,6 +1,6 @@ -mtime: 1773996763 -commit: 2e3d1ce733f3a051ce6734d815b11d1ccff89b9f6f40ee6b4069bfd9b149e5eb +mtime: 1774348447 +commit: ce6ce4bd7cb9a10d04c9151daa62a3a852cf125a6ed8d0694a816e05a1c3ce18 url: https://src.opensuse.org/chromium/chromium.git -revision: 2e3d1ce733f3a051ce6734d815b11d1ccff89b9f6f40ee6b4069bfd9b149e5eb +revision: ce6ce4bd7cb9a10d04c9151daa62a3a852cf125a6ed8d0694a816e05a1c3ce18 projectscmsync: https://src.opensuse.org/chromium/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-03-24 11:34:36.000000000 +0100 @@ -0,0 +1,4 @@ +.osc +*.patch~ +*-build/ +.*.swp ++++++ chromium-146.0.7680.153-linux.tar.xz -> chromium-146.0.7680.164-linux.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-146.0.7680.153-linux.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.8177/chromium-146.0.7680.164-linux.tar.xz differ: char 15, line 1 ++++++ chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch ++++++ commit 3bccbdead3efa7e91f7c9d4078106dedaed84fb8 Author: Levi Zim <[email protected]> Date: Mon Mar 16 09:27:53 2026 -0700 Fix blink compilation for platforms other than x86 and arm Commit https://crrev.com/c/7649841 forgot to update the generic implementation, causing compilation failures for platforms other than x86 and arm. This CL fixes it. Bug: 401184803 Change-Id: I9460ada952eeaa22fd571d299235fcfb5e1ef1c1 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7666544 Commit-Queue: Michael Wilson <[email protected]> Auto-Submit: Levi Zim <[email protected]> Reviewed-by: Michael Wilson <[email protected]> Cr-Commit-Position: refs/heads/main@{#1599945} diff --git a/third_party/blink/renderer/platform/audio/delay.cc b/third_party/blink/renderer/platform/audio/delay.cc index ea4159a8ce3f8..97db2039aff2c 100644 --- a/third_party/blink/renderer/platform/audio/delay.cc +++ b/third_party/blink/renderer/platform/audio/delay.cc @@ -102,8 +102,8 @@ double Delay::DelayTime(float sample_rate) { #if !(defined(ARCH_CPU_X86_FAMILY) || defined(CPU_ARM_NEON)) // Default scalar versions if simd/neon are not available. std::tuple<size_t, size_t> Delay::ProcessARateVector( - float* destination, - uint32_t frames_to_process) const { + base::span<float> destination, + size_t frames_to_process) const { // We don't have a vectorized version, so just do nothing and return the 0 to // indicate no frames processed and return the current write_index_. return std::make_tuple(0, write_index_);
