Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2017-04-03 11:05:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chromium" Mon Apr 3 11:05:15 2017 rev:152 rq:483829 version:57.0.2987.133 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2017-03-20 17:10:58.809862306 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2017-04-03 11:05:40.962810459 +0200 @@ -1,0 +2,21 @@ +Thu Mar 30 13:07:50 UTC 2017 - tchvatal@suse.com + +- Version update to 57.0.2987.133 bsc#1031677: + * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar + * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs + * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin + * High CVE-2017-5056: Use after free in Blink. Credit to anonymous + * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587) + +------------------------------------------------------------------- +Fri Mar 24 15:22:38 UTC 2017 - tchvatal@suse.com + +- Drop the browser(npapi) provide which is not true + +------------------------------------------------------------------- +Sun Mar 19 11:04:47 UTC 2017 - tchvatal@suse.com + +- Add patch to build with gcc4 + * chromium-57-gcc4.patch + +------------------------------------------------------------------- Old: ---- chromium-57.0.2987.110.tar.xz New: ---- chromium-57-gcc4.patch chromium-57.0.2987.133.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.IzCfe0/_old 2017-04-03 11:05:58.856282405 +0200 +++ /var/tmp/diff_new_pack.IzCfe0/_new 2017-04-03 11:05:58.860281840 +0200 @@ -42,7 +42,7 @@ %endif %bcond_with clang Name: chromium -Version: 57.0.2987.110 +Version: 57.0.2987.133 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause and LGPL-2.1+ @@ -78,6 +78,8 @@ Patch10: gcc60-fixes.diff # PATCH-FIX-SUSE make ld use less memory by tweaking compiler flags Patch13: chromium-linker-memory.patch +# PATCH-FIX-UPSTREAM work with old gcc +Patch14: chromium-57-gcc4.patch # archlinux arm enhancement patches Patch100: arm-webrtc-fix.patch Patch101: arm_use_right_compiler.patch @@ -181,7 +183,6 @@ Conflicts: otherproviders(chromium-browser) Provides: chromium-based-browser = %{version} Provides: chromium-browser = %{version} -Provides: browser(npapi) Obsoletes: %{name}-suid-helper < %{version} Obsoletes: chromium-browser < %{version} Provides: %{name}-suid-helper = %{version} @@ -265,6 +266,7 @@ %endif %patch10 %patch13 -p1 +%patch14 -p1 # archlinux arm enhancements %patch100 ++++++ chromium-57-gcc4.patch ++++++ --- a/chrome/browser/ui/libgtkui/gtk_ui.cc +++ b/chrome/browser/ui/libgtkui/gtk_ui.cc @@ -676,7 +676,7 @@ : nullptr); } - return gtk_border; + return std::move(gtk_border); } void GtkUi::AddWindowButtonOrderObserver( --- a/third_party/webrtc/modules/desktop_capture/screen_capturer_x11.cc +++ b/third_party/webrtc/modules/desktop_capture/screen_capturer_x11.cc @@ -412,7 +412,7 @@ std::unique_ptr<DesktopCapturer> DesktopCapturer::CreateRawScreenCapturer( return nullptr; } - return capturer; + return std::move(capturer); } } // namespace webrtc ++++++ chromium-57.0.2987.110.tar.xz -> chromium-57.0.2987.133.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-57.0.2987.110.tar.xz /work/SRC/openSUSE:Factory/.chromium.new/chromium-57.0.2987.133.tar.xz differ: char 27, line 1