Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2016-02-18 11:07:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2016-02-12 11:22:35.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2016-02-18 12:36:16.000000000 +0100 @@ -1,0 +2,26 @@ +Mon Feb 15 09:19:16 UTC 2016 - [email protected] + +- Update to Chromium 48.0.2564.109 + * Security fixes (boo#965999) + - CVE-2016-1622: Same-origin bypass in Extensions + - CVE-2016-1623: Same-origin bypass in DOM + - CVE-2016-1624: Buffer overflow in Brotli + - CVE-2016-1625: Navigation bypass in Chrome Instant + - CVE-2016-1626: Out-of-bounds read in PDFium + - CVE-2016-1627: Various fixes from internal audits, fuzzing + and other initiatives + +------------------------------------------------------------------- +Sat Feb 13 11:44:02 UTC 2016 - [email protected] + +- Drop the libva support completely. It seems that this is causing + more issues than it actually resolves. (boo#965566) + * Drop chromium-enable-vaapi.patch + +------------------------------------------------------------------- +Thu Feb 11 09:12:47 UTC 2016 - [email protected] + +- Don't build with libva support for openSUSE 13.2 and lower + (boo#966082) + +------------------------------------------------------------------- Old: ---- chromium-48.0.2564.103.tar.xz chromium-enable-vaapi.patch New: ---- chromium-48.0.2564.109.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.onFeRG/_old 2016-02-18 12:36:29.000000000 +0100 +++ /var/tmp/diff_new_pack.onFeRG/_new 2016-02-18 12:36:29.000000000 +0100 @@ -17,9 +17,8 @@ %define chromium_no_dlopen 1 -%bcond_without libva Name: chromium -Version: 48.0.2564.103 +Version: 48.0.2564.109 Release: 0 Summary: Google's opens source browser project License: BSD-3-Clause and LGPL-2.1+ @@ -59,8 +58,6 @@ Patch11: chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch # PATCH-FIX-OPENSUSE fix_building_widevinecdm_with_chromium.patch - Enable WideVine plugin Patch12: fix_building_widevinecdm_with_chromium.patch -# PATCH-FIX-OPENSUSE chromium-enable-vaapi.patch - Enable VA-API hardware acceleration in Linux -Patch13: chromium-enable-vaapi.patch # PATCH-FIX-OPENSUSE fix_network_api_crash.patch - Fix crash in network API, e.g. when using chromecast extension Patch14: fix_network_api_crash.patch # archlinux arm enhancement patches @@ -172,9 +169,6 @@ BuildRequires: libopencore-amr-devel BuildRequires: libx264-devel BuildRequires: libxvidcore-devel -%if %{with libva} -BuildRequires: libva-devel -%endif %endif %description @@ -241,9 +235,6 @@ Requires: %{name} = %{version} Conflicts: otherproviders(ffmpegsumo) Provides: ffmpegsumo = %{version} -%if %{with libva} -Recommends: Mesa-libva -%endif %description ffmpeg FFMPEG library built from the chromium sources. @@ -266,9 +257,6 @@ %endif %patch11 -p1 %patch12 -p1 -%if %{with libva} -%patch13 -p1 -%endif %patch14 #Upstream fixes ++++++ chromium-48.0.2564.103.tar.xz -> chromium-48.0.2564.109.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-48.0.2564.103.tar.xz /work/SRC/openSUSE:Factory/.chromium.new/chromium-48.0.2564.109.tar.xz differ: char 27, line 1
