Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2026-04-17 21:03:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.11940 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Fri Apr 17 21:03:22 2026 rev:514 rq:1347177 version:147.0.7727.101 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2026-04-10 17:57:02.059798975 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.11940/chromium.changes 2026-04-17 21:03:56.921072988 +0200 @@ -1,0 +2,37 @@ +Wed Apr 15 22:22:33 UTC 2026 - Andreas Stieger <[email protected]> + +- Chromium 147.0.7727.101 (boo#1262174) + * CVE-2026-6296: Heap buffer overflow in ANGLE + * CVE-2026-6297: Use after free in Proxy + * CVE-2026-6298: Heap buffer overflow in Skia + * CVE-2026-6299: Use after free in Prerender + * CVE-2026-6358: Use after free in XR + * CVE-2026-6359: Use after free in Video + * CVE-2026-6300: Use after free in CSS + * CVE-2026-6301: Type Confusion in Turbofan + * CVE-2026-6302: Use after free in Video + * CVE-2026-6303: Use after free in Codecs + * CVE-2026-6304: Use after free in Graphite + * CVE-2026-6305: Heap buffer overflow in PDFium + * CVE-2026-6306: Heap buffer overflow in PDFium + * CVE-2026-6307: Type Confusion in Turbofan + * CVE-2026-6308: Out of bounds read in Media + * CVE-2026-6309: Use after free in Viz + * CVE-2026-6360: Use after free in FileSystem + * CVE-2026-6310: Use after free in Dawn + * CVE-2026-6311: Uninitialized Use in Accessibility + * CVE-2026-6312: Insufficient policy enforcement in Passwords + * CVE-2026-6313: Insufficient policy enforcement in CORS + * CVE-2026-6314: Out of bounds write in GPU + * CVE-2026-6315: Use after free in Permissions + * CVE-2026-6316: Use after free in Forms + * CVE-2026-6361: Heap buffer overflow in PDFium + * CVE-2026-6362: Use after free in Codecs + * CVE-2026-6317: Use after free in Cast + * CVE-2026-6363: Type Confusion in V8 + * CVE-2026-6318: Use after free in Codecs + * CVE-2026-6319: Use after free in Payments + * CVE-2026-6364: Out of bounds read in Skia +- try sloppiness=gcno_cwd in local ccache config + +------------------------------------------------------------------- Old: ---- chromium-147.0.7727.55-linux.tar.xz New: ---- chromium-147.0.7727.101-linux.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.DXyr97/_old 2026-04-17 21:04:03.793356113 +0200 +++ /var/tmp/diff_new_pack.DXyr97/_new 2026-04-17 21:04:03.797356278 +0200 @@ -132,7 +132,7 @@ %global official_build 1 Name: chromium%{n_suffix} -Version: 147.0.7727.55 +Version: 147.0.7727.101 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -607,6 +607,16 @@ %build # ccache experiment +mkdir -p $HOME/.config/ccache +cat << EOF > $HOME/.config/ccache/ccache.conf +compression = true +cache_dir = /.ccache +sloppiness = gcno_cwd +EOF +export CCACHE_CONFIGPATH=$HOME/.config/ccache/ccache.conf +# show what we get +ccache --show-config +# # Zero out the hit/miss stats from previous runs to have data from this build ccache --zero-stats # show how much cache we are starting with ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.DXyr97/_old 2026-04-17 21:04:04.049366660 +0200 +++ /var/tmp/diff_new_pack.DXyr97/_new 2026-04-17 21:04:04.057366989 +0200 @@ -1,6 +1,6 @@ -mtime: 1775685132 -commit: 3530cc7a496a01b277470430ecb35b6e00df449eb98ccb219bee5c8397777241 +mtime: 1776291829 +commit: 644e209725e7de17fe86b838f7959623c0c2fa19242b25fd6a1dea6006c3d589 url: https://src.opensuse.org/chromium/chromium.git -revision: 3530cc7a496a01b277470430ecb35b6e00df449eb98ccb219bee5c8397777241 +revision: 644e209725e7de17fe86b838f7959623c0c2fa19242b25fd6a1dea6006c3d589 projectscmsync: https://src.opensuse.org/chromium/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-04-16 00:31:01.000000000 +0200 @@ -0,0 +1,4 @@ +.osc +*.patch~ +*-build/ +.*.swp ++++++ chromium-147.0.7727.55-linux.tar.xz -> chromium-147.0.7727.101-linux.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-147.0.7727.55-linux.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.11940/chromium-147.0.7727.101-linux.tar.xz differ: char 15, line 1
