Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2022-10-03 13:44:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Mon Oct 3 13:44:55 2022 rev:353 rq:1007437 version:106.0.5249.91 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2022-09-15 22:58:31.529102755 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.2275/chromium.changes 2022-10-03 13:45:45.917481852 +0200 @@ -1,0 +2,33 @@ +Sat Oct 1 07:59:24 UTC 2022 - Andreas Stieger <andreas.stie...@gmx.de> + +- Chromium 106.0.5249.91 (boo#1203808): + * CVE-2022-3370: Use after free in Custom Elements + * CVE-2022-3373: Out of bounds write in V8 +- includes changes from 106.0.5249.61: + * CVE-2022-3304: Use after free in CSS + * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools + * CVE-2022-3305: Use after free in Survey + * CVE-2022-3306: Use after free in Survey + * CVE-2022-3307: Use after free in Media + * CVE-2022-3308: Insufficient policy enforcement in Developer Tools + * CVE-2022-3309: Use after free in Assistant + * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs + * CVE-2022-3311: Use after free in Import + * CVE-2022-3312: Insufficient validation of untrusted input in VPN + * CVE-2022-3313: Incorrect security UI in Full Screen + * CVE-2022-3314: Use after free in Logging + * CVE-2022-3315: Type confusion in Blink + * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing + * CVE-2022-3317: Insufficient validation of untrusted input in Intents + * CVE-2022-3318: Use after free in ChromeOS Notifications +- drop patches: + * chromium-104-tflite-system-zlib.patch + * chromium-105-AdjustMaskLayerGeometry-ceilf.patch + * chromium-105-Trap-raw_ptr.patch + * chromium-105-browser_finder-include.patch + * chromium-105-raw_ptr-noexcept.patch +- add patches + * chromium-106-ffmpeg-duration.patch + * chromium-106-AutofillPopupControllerImpl-namespace.patch + +------------------------------------------------------------------- Old: ---- chromium-104-tflite-system-zlib.patch chromium-105-AdjustMaskLayerGeometry-ceilf.patch chromium-105-Trap-raw_ptr.patch chromium-105-browser_finder-include.patch chromium-105-raw_ptr-noexcept.patch chromium-105.0.5195.127.tar.xz New: ---- chromium-106-AutofillPopupControllerImpl-namespace.patch chromium-106-ffmpeg-duration.patch chromium-106.0.5249.91.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.dsONIP/_old 2022-10-03 13:45:54.825501449 +0200 +++ /var/tmp/diff_new_pack.dsONIP/_new 2022-10-03 13:45:54.833501466 +0200 @@ -67,7 +67,7 @@ %endif Name: chromium -Version: 105.0.5195.127 +Version: 106.0.5249.91 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -116,16 +116,13 @@ Patch90: chromium-100-InMilliseconds-constexpr.patch Patch98: chromium-102-regex_pattern-array.patch Patch103: chromium-103-VirtualCursor-std-layout.patch -Patch105: chromium-104-tflite-system-zlib.patch -Patch106: chromium-105-AdjustMaskLayerGeometry-ceilf.patch Patch107: chromium-105-Bitmap-include.patch -Patch108: chromium-105-browser_finder-include.patch -Patch109: chromium-105-raw_ptr-noexcept.patch -Patch110: chromium-105-Trap-raw_ptr.patch Patch111: chromium-105-wayland-1.20.patch Patch201: chromium-86-fix-vaapi-on-intel.patch # PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding Patch202: chromium-prop-codecs.patch +Patch203: chromium-106-ffmpeg-duration.patch +Patch204: chromium-106-AutofillPopupControllerImpl-namespace.patch BuildRequires: SDL-devel BuildRequires: bison BuildRequires: cups-devel @@ -392,6 +389,7 @@ third_party/angle/src/third_party/volk third_party/apple_apsl third_party/axe-core + third_party/bidimapper third_party/blink third_party/boringssl third_party/boringssl/src/third_party/fiat @@ -467,6 +465,7 @@ third_party/hunspell third_party/iccjpeg third_party/inspector_protocol + third_party/ipcz third_party/jinja2 third_party/jsoncpp third_party/jstemplate ++++++ chromium-105-Bitmap-include.patch ++++++ --- /var/tmp/diff_new_pack.dsONIP/_old 2022-10-03 13:45:54.917501651 +0200 +++ /var/tmp/diff_new_pack.dsONIP/_new 2022-10-03 13:45:54.921501659 +0200 @@ -11,13 +11,13 @@ Cr-Commit-Position: refs/heads/main@{#1027289} --- -diff --git a/net/disk_cache/blockfile/bitmap.h b/net/disk_cache/blockfile/bitmap.h -index 07806cf..9ffa98b9 100644 ---- a/net/disk_cache/blockfile/bitmap.h -+++ b/net/disk_cache/blockfile/bitmap.h -@@ -8,6 +8,8 @@ - #include <stdint.h> - #include <string.h> +Index: chromium-106.0.5249.91/net/disk_cache/blockfile/bitmap.h +=================================================================== +--- chromium-106.0.5249.91.orig/net/disk_cache/blockfile/bitmap.h ++++ chromium-106.0.5249.91/net/disk_cache/blockfile/bitmap.h +@@ -10,6 +10,8 @@ + + #include <memory> +#include <memory> + ++++++ chromium-106-AutofillPopupControllerImpl-namespace.patch ++++++ >From 65d31137fc8256627daab9d7c91074fca70b5882 Mon Sep 17 00:00:00 2001 From: Stephan Hartmann <sth...@googlemail.com> Date: Sun, 21 Aug 2022 10:27:08 +0000 Subject: [PATCH] libstdc++: add namespace for nullptr_t in AutofillPopupControllerImpl --- chrome/browser/ui/autofill/autofill_popup_controller_impl.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/chrome/browser/ui/autofill/autofill_popup_controller_impl.h b/chrome/browser/ui/autofill/autofill_popup_controller_impl.h index 295a104..54bfa4f 100644 --- a/chrome/browser/ui/autofill/autofill_popup_controller_impl.h +++ b/chrome/browser/ui/autofill/autofill_popup_controller_impl.h @@ -178,7 +178,7 @@ class AutofillPopupControllerImpl : public AutofillPopupController { class AutofillPopupViewPtr { public: AutofillPopupViewPtr() = default; - AutofillPopupViewPtr(nullptr_t) : ptr_(nullptr) {} + AutofillPopupViewPtr(std::nullptr_t) : ptr_(nullptr) {} AutofillPopupViewPtr(AutofillPopupView* ptr) : ptr_(ptr) {} explicit operator bool() const { return ptr_; } -- 2.35.1 ++++++ chromium-106-ffmpeg-duration.patch ++++++ Index: chromium-106.0.5249.91/media/filters/audio_file_reader.cc =================================================================== --- chromium-106.0.5249.91.orig/media/filters/audio_file_reader.cc +++ chromium-106.0.5249.91/media/filters/audio_file_reader.cc @@ -243,10 +243,10 @@ bool AudioFileReader::OnNewFrame( // silence from being output. In the case where we are also discarding some // portion of the packet (as indicated by a negative pts), we further want to // adjust the duration downward by however much exists before zero. - if (audio_codec_ == AudioCodec::kAAC && frame->duration) { + if (audio_codec_ == AudioCodec::kAAC && frame->pkt_duration) { const base::TimeDelta pkt_duration = ConvertFromTimeBase( glue_->format_context()->streams[stream_index_]->time_base, - frame->duration + std::min(static_cast<int64_t>(0), frame->pts)); + frame->pkt_duration + std::min(static_cast<int64_t>(0), frame->pts)); const base::TimeDelta frame_duration = base::Seconds(frames_read / static_cast<double>(sample_rate_)); ++++++ chromium-105.0.5195.127.tar.xz -> chromium-106.0.5249.91.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-105.0.5195.127.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.2275/chromium-106.0.5249.91.tar.xz differ: char 15, line 1 ++++++ chromium-prop-codecs.patch ++++++ --- /var/tmp/diff_new_pack.dsONIP/_old 2022-10-03 13:45:55.025501888 +0200 +++ /var/tmp/diff_new_pack.dsONIP/_new 2022-10-03 13:45:55.029501897 +0200 @@ -1,9 +1,9 @@ -Index: chromium-85.0.4183.69/media/BUILD.gn +Index: chromium-106.0.5249.91/media/BUILD.gn =================================================================== ---- chromium-85.0.4183.69.orig/media/BUILD.gn -+++ chromium-85.0.4183.69/media/BUILD.gn -@@ -44,12 +44,6 @@ buildflag_header("media_buildflags") { - ] +--- chromium-106.0.5249.91.orig/media/BUILD.gn ++++ chromium-106.0.5249.91/media/BUILD.gn +@@ -64,12 +64,6 @@ buildflag_header("media_buildflags") { + } } -if (proprietary_codecs && media_use_ffmpeg) {