Hello community,
here is the log from the commit of package chromium for openSUSE:Factory
checked in at 2016-09-05 21:21:18
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/chromium (Old)
and /work/SRC/openSUSE:Factory/.chromium.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium"
Changes:
--------
--- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2016-08-31
00:12:02.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2016-09-05
21:21:40.000000000 +0200
@@ -1,0 +2,28 @@
+Thu Sep 1 04:04:13 UTC 2016 - tittiatc...@gmail.com
+
+- Update to Chromium 53.0.2785.89
+ - Improvements to the GN build system (boo#996032, boo#99606, boo#995932)
+ - Security fixes (boo#996648)
+ * CVE-2016-5147: Universal XSS in Blink.
+ * CVE-2016-5148: Universal XSS in Blink.
+ * CVE-2016-5149: Script injection in extensions.
+ * CVE-2016-5150: Use after free in Blink.
+ * CVE-2016-5151: Use after free in PDFium.
+ * CVE-2016-5152: Heap overflow in PDFium.
+ * CVE-2016-5153: Use after destruction in Blink.
+ * CVE-2016-5154: Heap overflow in PDFium.
+ * CVE-2016-5155: Address bar spoofing.
+ * CVE-2016-5156: Use after free in event bindings.
+ * CVE-2016-5157: Heap overflow in PDFium.
+ * CVE-2016-5158: Heap overflow in PDFium.
+ * CVE-2016-5159: Heap overflow in PDFium.
+ * CVE-2016-5161: Type confusion in Blink.
+ * CVE-2016-5162: Extensions web accessible resources bypass.
+ * CVE-2016-5163: Address bar spoofing.
+ * CVE-2016-5164: Universal XSS using DevTools.
+ * CVE-2016-5165: Script injection in DevTools.
+ * CVE-2016-5166: SMB Relay Attack via Save Page As.
+ * CVE-2016-5160: Extensions web accessible resources bypass.
+- Drop patches chromium-snapshot-toolchain-r1.patch
+
+-------------------------------------------------------------------
Old:
----
chromium-52.0.2743.116.tar.xz
chromium-snapshot-toolchain-r1.patch
New:
----
chromium-53.0.2785.89.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ chromium.spec ++++++
--- /var/tmp/diff_new_pack.MI9SW3/_old 2016-09-05 21:21:55.000000000 +0200
+++ /var/tmp/diff_new_pack.MI9SW3/_new 2016-09-05 21:21:55.000000000 +0200
@@ -17,7 +17,7 @@
Name: chromium
-Version: 52.0.2743.116
+Version: 53.0.2785.89
Release: 0
Summary: Google's opens source browser project
License: BSD-3-Clause and LGPL-2.1+
@@ -55,7 +55,6 @@
Patch101: arm_use_right_compiler.patch
# GN buildsystem related patches
Patch200: chromium-last-commit-position-r0.patch
-Patch201: chromium-snapshot-toolchain-r1.patch
BuildRequires: alsa-devel
BuildRequires: binutils-gold
@@ -246,7 +245,6 @@
#GN Buildsystem fixes
%patch200 -p1
-%patch201 -p0
#Standard patches
%patch1
@@ -279,6 +277,7 @@
myconf_gn+=" is_clang=false"
myconf_gn+=" use_sysroot=false"
myconf_gn+=" treat_warnings_as_errors=false"
+myconf_gn+=" fatal_linker_warnings=false"
myconf_gn+=" use_allocator=\"none\""
myconf_gn+=" fieldtrial_testing_like_official_build=true"
++++++ arm_use_right_compiler.patch ++++++
--- /var/tmp/diff_new_pack.MI9SW3/_old 2016-09-05 21:21:55.000000000 +0200
+++ /var/tmp/diff_new_pack.MI9SW3/_new 2016-09-05 21:21:55.000000000 +0200
@@ -1,6 +1,6 @@
--- build/toolchain/linux/BUILD.gn 2016-08-25 12:19:55.634174140 +0200
+++ build/toolchain/linux/BUILD.gn 2016-08-25 12:19:55.634174140 +0200
-@@ -8,11 +8,11 @@
+@@ -8,17 +8,17 @@
clang_toolchain("clang_arm") {
toolchain_cpu = "arm"
toolchain_os = "linux"
@@ -8,6 +8,13 @@
+ toolprefix = ""
}
+ clang_toolchain("clang_arm64") {
+ toolchain_cpu = "arm64"
+ toolchain_os = "linux"
+- toolprefix = "aarch64-linux-gnu-"
++ toolprefix = ""
+ }
+
gcc_toolchain("arm") {
- toolprefix = "arm-linux-gnueabihf-"
+ toolprefix = ""
@@ -15,3 +22,4 @@
cc = "${toolprefix}gcc"
cxx = "${toolprefix}g++"
+
++++++ chromium-52.0.2743.116.tar.xz -> chromium-53.0.2785.89.tar.xz ++++++
/work/SRC/openSUSE:Factory/chromium/chromium-52.0.2743.116.tar.xz
/work/SRC/openSUSE:Factory/.chromium.new/chromium-53.0.2785.89.tar.xz differ:
char 26, line 1
++++++ chromium-sandbox-pie.patch ++++++
--- /var/tmp/diff_new_pack.MI9SW3/_old 2016-09-05 21:21:55.000000000 +0200
+++ /var/tmp/diff_new_pack.MI9SW3/_new 2016-09-05 21:21:55.000000000 +0200
@@ -17,6 +17,15 @@
+ "-pie",
+ ]
- deps = [
- "//build/config/sanitizers:deps",
+ import("//build/config/compiler/compiler.gni")
+ import("//build/config/sanitizers/sanitizers.gni")
+@@ -313,7 +317,7 @@
+ # other flags that executable_config might have.
+ configs -= [ "//build/config:executable_config" ]
+ if (!use_gold) {
+- ldflags = [ "-Wl,--disable-new-dtags" ]
++ ldflags += [ "-Wl,--disable-new-dtags" ]
+ }
+ }
+
