Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2026-10-29 16:05:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Thu Oct 29 16:05:45 2026 rev:557 rq:1393266 version:156.0.8078.73 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2026-10-22 15:53:54.270178263 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.1255/chromium.changes 2026-10-29 16:09:13.775331589 +0100 @@ -1,0 +2,57 @@ +Tue Oct 27 21:53:03 UTC 2026 - Andreas Stieger <[email protected]> + +- Chromium 156.0.8078.73 (boo#1288218): + * CVE-2026-118306: Memory corruption in FileSystem + * CVE-2026-118331: Improper input validation in FileAPI + * CVE-2026-118348: Improper input validation in Skia + * CVE-2026-118344: Use after free in Layout + * CVE-2026-118357: Use after free in FileSystem + * CVE-2026-118318: Improper access control in V8 + * CVE-2026-118350: Use after free in Turbolev + * CVE-2026-118339: Use after free in Animation + * CVE-2026-118305: Memory corruption in Turbolev + * CVE-2026-118317: Memory corruption in HTML + * CVE-2026-118320: Memory corruption in V8 + * CVE-2026-118322: Memory corruption in ANGLE + * CVE-2026-118329: Improper input validation in ANGLE + * CVE-2026-118354: Improper input validation in Skia + * CVE-2026-118340: Memory corruption in Skia + * CVE-2026-118321: Improper input validation in Core + * CVE-2026-118337: Improper access control in Forms + * CVE-2026-118352: Memory corruption in Cache + * CVE-2026-118355: Improper input validation in Command + * CVE-2026-118307: Use after free in Paint + * CVE-2026-118351: Memory corruption in Skia + * CVE-2026-118328: Improper input validation in WebRTC + * CVE-2026-118333: Missing authorization in Video + * CVE-2026-118336: Improper input validation in Headless + * CVE-2026-118358: Memory corruption in WebAudio + * CVE-2026-118353: Use after free in Paint + * CVE-2026-118349: Memory corruption in Payments + * CVE-2026-118327: Memory corruption in Media + * CVE-2026-118359: Memory corruption in V8 + * CVE-2026-118343: Improper input validation in ReadingList + * CVE-2026-118311: Memory corruption in Media + * CVE-2026-118334: Use after free in ImageCapture + * CVE-2026-118332: Improper input validation in Compositing + * CVE-2026-118313: Use after free in Video + * CVE-2026-118345: Use after free in PDFium + * CVE-2026-118304: Improper input validation in SVG + * CVE-2026-118316: Improper input validation in V8 + * CVE-2026-118346: Use after free in Compositing + * CVE-2026-118342: Out of bounds write in Editing + * CVE-2026-118310: Improper input validation in Views + * CVE-2026-118335: Improper input validation in Metrics + * CVE-2026-118308: Use after free in SVG + * CVE-2026-118314: Improper input validation in UI + * CVE-2026-118347: Use after free in FileSystem + * CVE-2026-118341: Use after free in Modularization + * CVE-2026-118330: Use after free in Browser + * CVE-2026-118315: Improper input validation in SVG + * CVE-2026-118356: Use after free in WTF + * CVE-2026-118309: Improper input validation in UI + * CVE-2026-118319: Memory corruption in Skia + * CVE-2026-118312: Memory corruption in Paint + * CVE-2026-118338: Use after free in Animation + +------------------------------------------------------------------- Old: ---- chromium-156.0.8078.47-linux.tar.xz New: ---- chromium-156.0.8078.73-linux.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.yzKLlF/_old 2026-10-29 16:09:24.037761968 +0100 +++ /var/tmp/diff_new_pack.yzKLlF/_new 2026-10-29 16:09:24.040762093 +0100 @@ -139,7 +139,7 @@ %global official_build 1 Name: chromium%{n_suffix} -Version: 156.0.8078.47 +Version: 156.0.8078.73 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.yzKLlF/_old 2026-10-29 16:09:24.233770188 +0100 +++ /var/tmp/diff_new_pack.yzKLlF/_new 2026-10-29 16:09:24.237770355 +0100 @@ -1,7 +1,7 @@ -mtime: 1792602735 -commit: 416d9307c41437b43b6976fbe7bf509f46c6e254ccb010ed8e3dde8f77820d54 +mtime: 1793169466 +commit: d89ed3e962b6a644f59a9d30c7c9d33b4aeca8dbd7bb5bf3f92c5fdb684f60ba url: https://src.opensuse.org/chromium/chromium -revision: 416d9307c41437b43b6976fbe7bf509f46c6e254ccb010ed8e3dde8f77820d54 +revision: d89ed3e962b6a644f59a9d30c7c9d33b4aeca8dbd7bb5bf3f92c5fdb684f60ba trackingbranch: main projectscmsync: https://src.opensuse.org/chromium/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-28 07:37:46.000000000 +0100 @@ -0,0 +1,4 @@ +.osc +*.patch~ +*-build/ +.*.swp ++++++ chromium-156.0.8078.47-linux.tar.xz -> chromium-156.0.8078.73-linux.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-156.0.8078.47-linux.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.1255/chromium-156.0.8078.73-linux.tar.xz differ: char 15, line 1
