Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ungoogled-chromium for openSUSE:Factory checked in at 2023-09-29 11:43:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ungoogled-chromium (Old) and /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.28202 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ungoogled-chromium" Fri Sep 29 11:43:05 2023 rev:15 rq:1114163 version:117.0.5938.132 Changes: -------- --- /work/SRC/openSUSE:Factory/ungoogled-chromium/ungoogled-chromium.changes 2023-09-21 22:20:53.396165905 +0200 +++ /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.28202/ungoogled-chromium.changes 2023-09-29 12:20:41.414387125 +0200 @@ -1,0 +2,14 @@ +Thu Sep 28 22:22:34 UTC 2023 - Michał Szczepaniak <m.szczepaniak.000@gmail.com> + +- ungoogled-chromium 117.0.5938.132 (boo#1215776): + * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) + * CVE-2023-5186: Use after free in Passwords + * CVE-2023-5187: Use after free in Extensions + +------------------------------------------------------------------- +Mon Sep 25 00:30:35 UTC 2023 - Michał Szczepaniak <m.szczepaniak.000@gmail.com> + +- ungoogled-chromium 117.0.5938.92: + * stability improvements + +------------------------------------------------------------------- Old: ---- chromium-117.0.5938.88.tar.xz ungoogled-chromium-117.0.5938.88-1.tar.gz New: ---- 117.0.5938.132-1.tar.gz chromium-117.0.5938.132.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ungoogled-chromium.spec ++++++ --- /var/tmp/diff_new_pack.MrjkaY/_old 2023-09-29 12:20:57.170954531 +0200 +++ /var/tmp/diff_new_pack.MrjkaY/_new 2023-09-29 12:20:57.174954676 +0200 @@ -77,7 +77,7 @@ %endif # Package names Name: ungoogled-chromium -Version: 117.0.5938.88 +Version: 117.0.5938.132 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -86,7 +86,7 @@ Source1: esbuild.tar.gz Source3: README.SUSE Source4: ffmpeg-new-channel-layout.patch -Source5: ungoogled-chromium-%{version}-1.tar.gz +Source5: https://github.com/ungoogled-software/ungoogled-chromium/archive/refs/tags/%{version}-1.tar.gz Source6: ungoogled-chromium.patch # Toolchain definitions Source30: master_preferences @@ -176,8 +176,8 @@ BuildRequires: pkgconfig(dbus-1) BuildRequires: pkgconfig(dirac) >= 1.0.0 BuildRequires: pkgconfig(dri) -BuildRequires: pkgconfig(expat) BuildRequires: pkgconfig(epoxy) +BuildRequires: pkgconfig(expat) BuildRequires: pkgconfig(flac++) BuildRequires: pkgconfig(form) BuildRequires: pkgconfig(formw) ++++++ ungoogled-chromium-117.0.5938.88-1.tar.gz -> 117.0.5938.132-1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/.github/workflows/new_version_check.yml new/ungoogled-chromium-117.0.5938.132-1/.github/workflows/new_version_check.yml --- old/ungoogled-chromium-117.0.5938.88-1/.github/workflows/new_version_check.yml 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/.github/workflows/new_version_check.yml 2023-09-28 02:08:15.000000000 +0200 @@ -24,9 +24,9 @@ id: latest-version run: | set -e - echo "linux_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/linux/channels/stable/versions/all/releases?filter=endtime=none,fraction>0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT - echo "win_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/win/channels/stable/versions/all/releases?filter=endtime=none,fraction>0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT - echo "mac_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/mac/channels/stable/versions/all/releases?filter=endtime=none,fraction>0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT + echo "linux_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/linux/channels/stable/versions/all/releases?filter=endtime=none,fraction>=0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT + echo "win_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/win/channels/stable/versions/all/releases?filter=endtime=none,fraction>=0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT + echo "mac_version=$( curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/mac/channels/stable/versions/all/releases?filter=endtime=none,fraction>=0.5&order_by=version%20desc' | jq -re '.releases | first | .version' )" >> $GITHUB_OUTPUT - uses: actions/checkout@v3 - name: Create Issue for all platforms if: | diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/chromium_version.txt new/ungoogled-chromium-117.0.5938.132-1/chromium_version.txt --- old/ungoogled-chromium-117.0.5938.88-1/chromium_version.txt 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/chromium_version.txt 2023-09-28 02:08:15.000000000 +0200 @@ -1 +1 @@ -117.0.5938.88 +117.0.5938.132 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/domain_substitution.list new/ungoogled-chromium-117.0.5938.132-1/domain_substitution.list --- old/ungoogled-chromium-117.0.5938.88-1/domain_substitution.list 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/domain_substitution.list 2023-09-28 02:08:15.000000000 +0200 @@ -11622,14 +11622,19 @@ third_party/openscreen/src/cast/standalone_sender/remoting_sender.h third_party/openscreen/src/cast/standalone_sender/streaming_video_encoder.h third_party/openscreen/src/cast/streaming/capture_configs.h +third_party/openscreen/src/cast/streaming/clock_offset_estimator.h +third_party/openscreen/src/cast/streaming/compound_rtcp_parser.cc third_party/openscreen/src/cast/streaming/constants.h +third_party/openscreen/src/cast/streaming/encoded_frame.h third_party/openscreen/src/cast/streaming/receiver_constraints.h third_party/openscreen/src/cast/streaming/receiver_session.h third_party/openscreen/src/cast/streaming/remoting_capabilities.h +third_party/openscreen/src/cast/streaming/rtcp_common.cc third_party/openscreen/src/cast/streaming/rtp_defines.h +third_party/openscreen/src/cast/streaming/sender.cc third_party/openscreen/src/cast/streaming/sender_session_unittest.cc third_party/openscreen/src/cast/streaming/session_messenger_unittest.cc -third_party/openscreen/src/cast/streaming/statistics.h +third_party/openscreen/src/cast/streaming/statistics_analyzer_unittest.cc third_party/openscreen/src/cast/streaming/statistics_collector.cc third_party/openscreen/src/cast/test/cast_socket_e2e_test.cc third_party/openscreen/src/discovery/common/reporting_client.h @@ -11647,6 +11652,7 @@ third_party/openscreen/src/test/test_main.cc third_party/openscreen/src/testing/libfuzzer/BUILD.gn third_party/openscreen/src/third_party/abseil/BUILD.gn +third_party/openscreen/src/third_party/boringssl/BUILD.gn third_party/openscreen/src/third_party/mozilla/LICENSE.txt third_party/openscreen/src/third_party/mozilla/url_parse.cc third_party/openscreen/src/third_party/mozilla/url_parse.h @@ -12110,7 +12116,6 @@ third_party/openscreen/src/third_party/protobuf/src/google/protobuf/wire_format_lite.cc third_party/openscreen/src/third_party/protobuf/src/google/protobuf/wire_format_lite.h third_party/openscreen/src/third_party/protobuf/src/google/protobuf/wire_format_unittest.cc -third_party/openscreen/src/third_party/quiche/BUILD.gn third_party/openscreen/src/third_party/zlib/BUILD.gn third_party/openscreen/src/tools/cddl/sema.cc third_party/openscreen/src/tools/licenses.py diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch new/ungoogled-chromium-117.0.5938.132-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch 2023-09-28 02:08:15.000000000 +0200 @@ -370,7 +370,7 @@ // If no mime type or explicitly specified a name, don't replace file // extension. if (sniffed_mime_type.empty() || !suggested_filename.empty()) -@@ -1271,30 +1264,7 @@ DownloadFileType::DangerLevel DownloadTa +@@ -1274,30 +1267,7 @@ DownloadFileType::DangerLevel DownloadTa download_->HasUserGesture()) return DownloadFileType::NOT_DANGEROUS; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch new/ungoogled-chromium-117.0.5938.132-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch 2023-09-28 02:08:15.000000000 +0200 @@ -442,7 +442,7 @@ danger_level_ = GetDangerLevel( visited_referrer_before ? VISITED_REFERRER : NO_VISITS_TO_REFERRER); if (danger_level_ != DownloadFileType::NOT_DANGEROUS && -@@ -1269,6 +1271,7 @@ DownloadFileType::DangerLevel DownloadTa +@@ -1272,6 +1274,7 @@ DownloadFileType::DangerLevel DownloadTa absl::optional<base::Time> DownloadTargetDeterminer::GetLastDownloadBypassTimestamp() const { @@ -450,7 +450,7 @@ safe_browsing::SafeBrowsingMetricsCollector* metrics_collector = safe_browsing::SafeBrowsingMetricsCollectorFactory::GetForProfile( GetProfile()); -@@ -1277,6 +1280,9 @@ DownloadTargetDeterminer::GetLastDownloa +@@ -1280,6 +1283,9 @@ DownloadTargetDeterminer::GetLastDownloa safe_browsing::SafeBrowsingMetricsCollector:: EventType::DANGEROUS_DOWNLOAD_BYPASS) : absl::nullopt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch new/ungoogled-chromium-117.0.5938.132-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-09-28 02:08:15.000000000 +0200 @@ -5366,15 +5366,15 @@ #include "components/signin/public/identity_manager/primary_account_mutator.h" --- a/components/signin/internal/identity_manager/account_tracker_service.cc +++ b/components/signin/internal/identity_manager/account_tracker_service.cc -@@ -37,7 +37,6 @@ +@@ -36,7 +36,6 @@ #include "components/prefs/scoped_user_pref_update.h" #include "components/signin/internal/identity_manager/account_capabilities_constants.h" #include "components/signin/internal/identity_manager/account_info_util.h" -#include "components/signin/public/base/signin_pref_names.h" #include "components/signin/public/base/signin_switches.h" #include "components/signin/public/identity_manager/account_capabilities.h" - #include "components/signin/public/identity_manager/account_info.h" -@@ -204,11 +203,6 @@ AccountTrackerService::~AccountTrackerSe + #include "components/signin/public/identity_manager/tribool.h" +@@ -201,11 +200,6 @@ AccountTrackerService::~AccountTrackerSe // static void AccountTrackerService::RegisterPrefs(PrefRegistrySimple* registry) { @@ -5386,7 +5386,7 @@ } void AccountTrackerService::Initialize(PrefService* pref_service, -@@ -531,14 +525,12 @@ AccountTrackerService::ComputeNewMigrati +@@ -525,14 +519,12 @@ AccountTrackerService::ComputeNewMigrati void AccountTrackerService::SetMigrationState(AccountIdMigrationState state) { DCHECK(state != MIGRATION_DONE || AreAllAccountsMigrated()) << "state: " << state << ", accounts = " << AccountsToString(accounts_); @@ -5402,7 +5402,7 @@ } #endif // BUILDFLAG(IS_CHROMEOS_ASH) -@@ -596,26 +588,6 @@ void AccountTrackerService::OnAccountIma +@@ -590,26 +582,6 @@ void AccountTrackerService::OnAccountIma const CoreAccountId& account_id, const std::string& image_url_with_size, bool success) { @@ -5429,7 +5429,7 @@ } void AccountTrackerService::RemoveAccountImageFromDisk( -@@ -627,184 +599,16 @@ void AccountTrackerService::RemoveAccoun +@@ -621,179 +593,16 @@ void AccountTrackerService::RemoveAccoun } void AccountTrackerService::LoadFromPrefs() { @@ -5439,11 +5439,6 @@ - const base::Value::Dict* dict = list[i].GetIfDict(); - if (dict) { - if (const std::string* account_key = dict->FindString(kAccountKeyKey)) { -- // Ignore empty account ids. -- if (account_key->empty()) { -- to_remove.insert(CoreAccountId()); -- continue; -- } - // Ignore incorrectly persisted non-canonical account ids. - if (account_key->find('@') != std::string::npos && - *account_key != gaia::CanonicalizeEmail(*account_key)) { @@ -6119,7 +6114,7 @@ #if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS) --- a/tools/metrics/histograms/enums.xml +++ b/tools/metrics/histograms/enums.xml -@@ -106929,7 +106929,6 @@ Full version information for the fingerp +@@ -106945,7 +106945,6 @@ Full version information for the fingerp <int value="3" label="kRestoreOnStartup"/> <int value="4" label="kURLsToRestoreOnStartup"/> <int value="5" label="extensions::pref_names::kExtensions"/> @@ -6127,7 +6122,7 @@ <int value="7" label="kSearchProviderOverrides"/> <int value="8" label="kDefaultSearchProviderSearchURL (Obsolete 12/2016)"/> <int value="9" label="kDefaultSearchProviderKeyword (Obsolete 12/2016)"/> -@@ -106944,10 +106943,7 @@ Full version information for the fingerp +@@ -106960,10 +106959,7 @@ Full version information for the fingerp <int value="18" label="kSafeBrowsingIncidentsSent"/> <int value="19" label="kSwReporterPromptVersion"/> <int value="20" label="kSwReporterPromptReason"/> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/add-flag-for-grab-handle.patch new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/add-flag-for-grab-handle.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/add-flag-for-grab-handle.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/add-flag-for-grab-handle.patch 2023-09-28 02:08:15.000000000 +0200 @@ -1,6 +1,6 @@ --- a/chrome/browser/ui/views/frame/tab_strip_region_view.cc +++ b/chrome/browser/ui/views/frame/tab_strip_region_view.cc -@@ -57,6 +57,7 @@ class FrameGrabHandle : public views::Vi +@@ -63,6 +63,7 @@ class FrameGrabHandle : public views::Vi // Reserve some space for the frame to be grabbed by, even if the tabstrip // is full. // TODO(tbergquist): Define this relative to the NTB insets again. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/add-flag-for-tabsearch-button.patch new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/add-flag-for-tabsearch-button.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/add-flag-for-tabsearch-button.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/add-flag-for-tabsearch-button.patch 2023-09-28 02:08:15.000000000 +0200 @@ -40,7 +40,7 @@ #include "base/functional/bind.h" #include "base/strings/utf_string_conversions.h" #include "build/build_config.h" -@@ -88,7 +89,8 @@ TabStripRegionView::TabStripRegionView(s +@@ -94,7 +95,8 @@ TabStripRegionView::TabStripRegionView(s // Add and configure the TabSearchButton. std::unique_ptr<TabSearchButton> tab_search_button; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/enable-paste-and-go-new-tab-button.patch new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/enable-paste-and-go-new-tab-button.patch --- old/ungoogled-chromium-117.0.5938.88-1/patches/extra/ungoogled-chromium/enable-paste-and-go-new-tab-button.patch 2023-09-16 05:09:49.000000000 +0200 +++ new/ungoogled-chromium-117.0.5938.132-1/patches/extra/ungoogled-chromium/enable-paste-and-go-new-tab-button.patch 2023-09-28 02:08:15.000000000 +0200 @@ -1,6 +1,6 @@ --- a/chrome/browser/ui/views/frame/tab_strip_region_view.cc +++ b/chrome/browser/ui/views/frame/tab_strip_region_view.cc -@@ -164,12 +164,10 @@ TabStripRegionView::TabStripRegionView(s +@@ -170,12 +170,10 @@ TabStripRegionView::TabStripRegionView(s // TODO(crbug.com/1052397): Revisit the macro expression once build flag // switch of lacros-chrome is complete. ++++++ chromium-117.0.5938.88.tar.xz -> chromium-117.0.5938.132.tar.xz ++++++ /work/SRC/openSUSE:Factory/ungoogled-chromium/chromium-117.0.5938.88.tar.xz /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.28202/chromium-117.0.5938.132.tar.xz differ: char 15, line 1