Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2020-10-23 12:20:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.3463 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Fri Oct 23 12:20:31 2020 rev:272 rq:843389 version:86.0.4240.111 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2020-10-18 16:29:31.696707321 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.3463/chromium.changes 2020-10-23 12:22:05.588672120 +0200 @@ -1,0 +2,16 @@ +Thu Oct 22 06:06:13 UTC 2020 - Marcus Meissner <[email protected]> + +- Update to 86.0.4240.111 bsc#1177936 + - CVE-2020-16000: Inappropriate implementation in Blink. + - CVE-2020-16001: Use after free in media. + - CVE-2020-16002: Use after free in PDFium. + - CVE-2020-15999: Heap buffer overflow in Freetype. + - CVE-2020-16003: Use after free in printing. + +------------------------------------------------------------------- +Mon Oct 19 12:27:04 UTC 2020 - Marcus Meissner <[email protected]> + +- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2 +- replace one missed g++-9 by g++-10 for leap 15.1/15.2 + +------------------------------------------------------------------- Old: ---- chromium-86.0.4240.75.tar.xz New: ---- chromium-86-f_seal.patch chromium-86.0.4240.111.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.nI8yZG/_old 2020-10-23 12:22:14.148678069 +0200 +++ /var/tmp/diff_new_pack.nI8yZG/_new 2020-10-23 12:22:14.152678072 +0200 @@ -51,7 +51,7 @@ %endif %bcond_with clang Name: chromium -Version: 86.0.4240.75 +Version: 86.0.4240.111 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -96,6 +96,7 @@ Patch57: chromium-86-nearby-explicit.patch Patch58: chromium-86-nearby-include.patch Patch59: chromium-86-ServiceWorkerRunningInfo-noexcept.patch +Patch60: chromium-86-f_seal.patch # Google seem not too keen on merging this but GPU accel is quite important # https://chromium-review.googlesource.com/c/chromium/src/+/532294 # https://github.com/saiarcot895/chromium-ubuntu-build/tree/master/debian/patches @@ -549,8 +550,8 @@ export AR=ar export NM=nm %if 0%{?suse_version} <= 1500 -export CC=gcc-9 -export CXX=g++-9 +export CC=gcc-10 +export CXX=g++-10 # some still call gcc/g++ mkdir -p "$HOME/bin/" ln -sfn %{_bindir}/$CC $HOME/bin/gcc ++++++ chromium-86-f_seal.patch ++++++ Index: chromium-86.0.4240.75/sandbox/policy/linux/bpf_gpu_policy_linux.cc =================================================================== --- chromium-86.0.4240.75.orig/sandbox/policy/linux/bpf_gpu_policy_linux.cc +++ chromium-86.0.4240.75/sandbox/policy/linux/bpf_gpu_policy_linux.cc @@ -6,6 +6,18 @@ #include <errno.h> #include <fcntl.h> +#ifndef F_SEAL_SEAL +# define F_SEAL_SEAL 0x0001 +#endif +#ifndef F_SEAL_SHRINK +# define F_SEAL_SHRINK 0x0002 +#endif +#ifndef F_SEAL_GROW +# define F_SEAL_GROW 0x0004 +#endif +#ifndef F_ADD_SEALS +# define F_ADD_SEALS 1033 +#endif #include <sys/socket.h> #include <sys/types.h> #include <unistd.h> ++++++ chromium-86.0.4240.75.tar.xz -> chromium-86.0.4240.111.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-86.0.4240.75.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.3463/chromium-86.0.4240.111.tar.xz differ: char 27, line 1
