Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2013-01-29 12:04:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chromium", Maintainer is "orphaned@suse.de" Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2013-01-02 12:55:48.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2013-01-29 12:04:17.000000000 +0100 @@ -1,0 +2,79 @@ +Sat Jan 26 18:19:10 UTC 2013 - crrodriguez@opensuse.org + +- Using system libxml2 requires system libxslt. +- Using system MESA does not work in i586 for some reason. + +------------------------------------------------------------------- +Sat Jan 26 15:59:32 UTC 2013 - crrodriguez@opensuse.org + +- Also use system MESA, factory version seems adecuate now. +- Always use system libxml2. + +------------------------------------------------------------------- +Fri Jan 25 16:15:58 UTC 2013 - crrodriguez@opensuse.org + +- Restrict the usage of system libraries instead of the bundled + ones to new products, too much hassle otherwise. + +------------------------------------------------------------------- +Fri Jan 25 03:32:21 UTC 2013 - crrodriguez@opensuse.org + +- Also link kerberos and libgps directly, do not dlopen them. + +------------------------------------------------------------------- +Fri Jan 25 02:08:01 UTC 2013 - crrodriguez@opensuse.org + +- Avoid using dlopen on system libraries, rpm or the package Manager + do not handle this at all. tested for a few weeks and implemented + with a macro so it can be easily disabled if problems arise. + + - Use SOME system libraries instead of the bundled ones, tested for + several weeks and implemented with a macro for easy enable/Disable + in case of trouble. + +------------------------------------------------------------------- +Thu Jan 24 06:45:53 UTC 2013 - tittiatcoke@gmail.com + +- Update to 26.0.1393 + * Bug and stability fixes + +------------------------------------------------------------------- +Sun Jan 13 18:15:47 UTC 2013 - tittiatcoke@gmail.com + +- Update to 26.0.1383 + * Security fixes + - CVE-2012-5145: Use-after-free in SVG layout + - CVE-2012-5146: Same origin policy bypass with malformed URL + - CVE-2012-5147: Use-after-free in DOM handling + - CVE-2012-5148: Missing filename sanitization in hyphenation + support + - CVE-2012-5149: Integer overflow in audio IPC handling + - CVE-2012-5150: Use-after-free when seeking video + - CVE-2012-5152: Out-of-bounds read when seeking video + - CVE-2012-5153: Out-of-bounds stack access in v8. + - CVE-2012-5154: Integer overflow in shared memory allocation + - CVE-2013-0830: Missing NUL termination in IPC. + - CVE-2013-0831: Possible path traversal from extension process + - CVE-2013-0832: Use-after-free with printing. + - CVE-2013-0833: Out-of-bounds read with printing. + - CVE-2013-0834: Out-of-bounds read with glyph handling + - CVE-2013-0835: Browser crash with geolocation + - CVE-2013-0836: Crash in v8 garbage collection. + - CVE-2013-0837: Crash in extension tab handling. + - CVE-2013-0838: Tighten permissions on shared memory segments + +------------------------------------------------------------------- +Tue Jan 8 13:19:57 UTC 2013 - tittiatcoke@gmail.com + +* Set up Google API keys, see + http://www.chromium.org/developers/how-tos/api-keys . + # Note: these are for openSUSE Chromium builds ONLY!! + (Setup was done based on indication from Pawel Hajdan) + +------------------------------------------------------------------- +Fri Jan 4 09:08:32 UTC 2013 - tittiatcoke@gmail.com + +- Update to 26.0.1375 + * Bug and stability fixes + +------------------------------------------------------------------- Old: ---- chromium.26.0.1371.0.svn174615M.tar.bz2 New: ---- chromium.26.0.1393.0.svn178525.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.Bda4Ab/_old 2013-01-29 12:04:58.000000000 +0100 +++ /var/tmp/diff_new_pack.Bda4Ab/_new 2013-01-29 12:04:58.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package chromium # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +16,12 @@ # -%define svn_revision 174615M +%define svn_revision 178525 +%define chromium_no_dlopen 1 +%define chromium_system_libs 0%{?suse_version} > 1220 Name: chromium -Version: 26.0.1371.0 +Version: 26.0.1393.0 Release: 0 Summary: Google's opens source browser project License: BSD-3-Clause and LGPL-2.1+ @@ -74,6 +76,7 @@ BuildRequires: cups-devel BuildRequires: desktop-file-utils BuildRequires: fdupes +BuildRequires: flac-devel BuildRequires: flex BuildRequires: freetype2-devel BuildRequires: gcc @@ -116,6 +119,17 @@ BuildRequires: pkgconfig(gconf-2.0) BuildRequires: pkgconfig(glib-2.0) BuildRequires: pkgconfig(gtk+-2.0) +BuildRequires: pkgconfig(libxml-2.0) +BuildRequires: pkgconfig(libxslt) +%if 0%{?chromium_system_libs} +BuildRequires: pkgconfig(libevent) +BuildRequires: pkgconfig(libmtp) +BuildRequires: pkgconfig(libsrtp) +BuildRequires: pkgconfig(libusb-1.0) +BuildRequires: pkgconfig(libwebp) +BuildRequires: pkgconfig(opus) +BuildRequires: pkgconfig(speex) +%endif BuildRequires: pkgconfig(webkit-1.0) BuildRequires: pkgconfig(x11) BuildRequires: pkgconfig(xcomposite) @@ -247,7 +261,7 @@ ## create make files -PARSED_OPT_FLAGS=`echo \'%{optflags} -fPIC -fno-ipa-cp -fno-strict-aliasing \' | sed "s/ /',/g" | sed "s/',/', '/g"` +PARSED_OPT_FLAGS=`echo \'%{optflags} -D_GNU_SOURCE -fPIC -fno-ipa-cp -fno-strict-aliasing \' | sed "s/ /',/g" | sed "s/',/', '/g"` for i in src/build/common.gypi; do sed -i "s|'-march=pentium4',||g" $i %ifnarch x86_64 @@ -270,6 +284,30 @@ -Dremove_webcore_debug_symbols=1 \ -Dproprietary_codecs=1 \ -Dlinux_fpic=1 \ +-Duse_system_libxml=1 \ +%if 0%{?chromium_system_libs} +-Duse_system_flac=1 \ +-Duse_system_speex=1 \ +-Duse_system_libusb=1 \ +-Duse_system_libexif=1 \ +-Duse_system_libevent=1 \ +%ifarch x86_64 +-Duse_system_mesa=1 \ +%endif +-Duse_system_libsrtp=1 \ +-Duse_system_libmtp=1 \ +-Duse_system_opus=1 \ +-Duse_system_libwebp=1 \ +%endif +%if 0%{?chromium_no_dlopen} +-Duse_pulseaudio=1 \ +-Dlinux_link_libpci=1 \ +-Dlinux_link_gnome_keyring=1 \ +-Dlinux_link_gsettings=1 \ +-Dlinux_link_libspeechd=1 \ +-Dlinux_link_kerberos=1 \ +-Dlinux_link_libgps=1 \ +%endif %ifnarch x86_64 -Ddisable_sse2=1 \ %endif @@ -288,7 +326,13 @@ -Dlinux_use_gold_flags=1 \ -Dlinux_use_gold_binary=1 \ %endif --Djavascript_engine=v8 +-Djavascript_engine=v8 \ +-Dgoogle_api_key='AIzaSyD1hTe85_a14kr1Ks8T3Ce75rvbR1_Dx7Q' \ +-Dgoogle_default_client_id='4139804441.apps.googleusercontent.com' \ +-Dgoogle_default_client_secret='KDTRKEZk2jwT_7CDpcmMA--P' +# Set up Google API keys, see http://www.chromium.org/developers/how-tos/api-keys +# Note: these are for the openSUSE Chromium builds ONLY. For your own distribution, +# please get your own set of keys. make -r %{?_smp_mflags} chrome V=1 BUILDTYPE=Release ++++++ chromium.26.0.1371.0.svn174615M.tar.bz2 -> chromium.26.0.1393.0.svn178525.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/chromium/chromium.26.0.1371.0.svn174615M.tar.bz2 /work/SRC/openSUSE:Factory/.chromium.new/chromium.26.0.1393.0.svn178525.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org