Dominique Leuenberger (dimstar_suse) accepted request 869982 from Callum Farmer (gmbr3) over 3 years ago (revision 282)

- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8 (forwarded request 869981 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 866254 from Callum Farmer (gmbr3) over 3 years ago (revision 281)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 863624 from Callum Farmer (gmbr3) over 3 years ago (revision 280)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 860987 from Callum Farmer (gmbr3) over 3 years ago (revision 279)

- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio (forwarded request 860986 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 857747 from Callum Farmer (gmbr3) over 3 years ago (revision 278)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 853253 from Callum Farmer (gmbr3) over 3 years ago (revision 277)

- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8 (forwarded request 853182 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 851548 from Callum Farmer (gmbr3) over 3 years ago (revision 276)

- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298) (forwarded request 851547 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 849507 from Callum Farmer (gmbr3) over 3 years ago (revision 275)

- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments. 
  - CVE-2020-16019: Inappropriate implementation in filesystem. 
  - CVE-2020-16020: Inappropriate implementation in cryptohome. 
  - CVE-2020-16021: Race in ImageBurner. 
  - CVE-2020-16022: Insufficient policy enforcement in networking. 
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI. 
  - CVE-2020-16023: Use after free in WebCodecs. 
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard. 
  - CVE-2020-16026: Use after free in WebRTC. 
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC. 
  - CVE-2020-16029: Inappropriate implementation in PDFium. 
  - CVE-2020-16030: Insufficient data validation in Blink. 
  - CVE-2019-8075: Insufficient data validation in Flash. 
  - CVE-2020-16031: Incorrect security UI in tab preview. 
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB. 
  - CVE-2020-16034: Inappropriate implementation in WebRTC. 
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics. 
  - CVE-2020-16036: Inappropriate implementation in cookies. (forwarded request 849506 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 848027 from Callum Farmer (gmbr3) over 3 years ago (revision 274)

- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation (forwarded request 848026 from gmbr3)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 845666 from Callum Farmer (gmbr3) over 3 years ago (revision 273)

- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 843389 from Marcus Meissner (msmeissn) over 3 years ago (revision 272)

- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing. (forwarded request 843351 from msmeissn)

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 841866 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 271)

- Remove vdpau->vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch
- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch
- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC. 
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing. 
  * CVE-2020-15972: Use after free in audio. 
  * CVE-2020-15990: Use after free in autofill. 
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink. 
  * CVE-2020-15975: Integer overflow in SwiftShader. 
  * CVE-2020-15976: Use after free in WebXR. 
  * CVE-2020-6557: Inappropriate implementation in networking. 
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio. 
  * CVE-2020-15982: Side-channel information leakage in cache. 
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox. 
  * CVE-2020-15985: Inappropriate implementation in Blink. 
  * CVE-2020-15986: Integer overflow in media. 
  * CVE-2020-15987: Use after free in WebRTC. 
  * CVE-2020-15992: Insufficient policy enforcement in networking. 
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch
- build with system libevent, the gn bug is no longer present

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 836361 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 270)

- Remove TOC files to avoid warning in post and fix angle conditional

- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 834860 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 269)

- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 834011 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 268)

- Add back the swiftshader folder wrt bsc#1176450

- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer. 
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas. 
  * CVE-2020-15959: Insufficient policy enforcement in networking.

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 832903 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 267)

- Move swiftshader stuff to chromium folder directly bsc#1176207

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 831606 from Tomáš Chvátal (scarabeus_iv) over 3 years ago (revision 266)

- Really update to .83 we accidentally included .69 beta release
- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch
- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media. 
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC. 
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
 *  chromium-85-DelayNode-cast.patch
 *  chromium-85-FrameWidget-namespace.patch
 *  chromium-85-NearbyConnection-abstract.patch
 *  chromium-85-NearbyShareEncryptedMetadataKey-include.patch
 *  chromium-85-oscillator_node-cast.patch
 *  chromium-85-ostream-operator.patch
 *  chromium-85-ozone-include.patch
 *  chromium-85-sim_hash-include.patch
- Removed patches:
 *  chromium-82-gcc-template.patch
 *  chromium-84-AXObject-stl-iterator.patch
 *  chromium-84-FilePath-add-noexcept.patch
 *  chromium-84-base-has_bultin.patch
 *  chromium-84-fix-decltype.patch
 *  chromium-84-gcc-DOMRect-constexpr.patch
 *  chromium-84-gcc-noexcept.patch
 *  chromium-84-gcc-template.patch
 *  chromium-84-gcc-unique_ptr.patch
 *  chromium-84-gcc-use-brace-initializer.patch
 *  chromium-84-nss-include.patch
 *  chromium-84-ozone-include.patch
 *  chromium-84-revert-manage-ManifestManagerHost-per-document.patch
 *  chromium-84-std-vector-const.patch
 *  chromium-clang_lto_visibility_public.patch
- Updated patches:
 *  chromium-83-gcc-10.patch
 *  chromium-84-gcc-include.patch
 *  chromium-prop-codecs.patch
 *  gcc-enable-lto.patch

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) committed almost 4 years ago (revision 265)

Fixup last change

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) committed almost 4 years ago (revision 264)

Revert back to old constraint: allows more workers

• Files Changed
• Browse Source

Dominique Leuenberger (dimstar_suse) accepted request 829898 from Tomáš Chvátal (scarabeus_iv) almost 4 years ago (revision 263)

- Do not use libexec as we use /usr/lib as a target folder

- Fix the build by removing expectation of llvm-7.0

- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader

- Use new _constraint memoryperjob.

• Files Changed
• Browse Source