Hello community, here is the log from the commit of package chromium for openSUSE:12.1:Update:Test checked in at 2012-01-31 12:15:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update:Test/chromium (Old) and /work/SRC/openSUSE:12.1:Update:Test/.chromium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chromium", Maintainer is "PRusnak@suse.com" Changes: -------- --- /work/SRC/openSUSE:12.1:Update:Test/chromium/chromium.changes 2011-12-15 19:32:09.000000000 +0100 +++ /work/SRC/openSUSE:12.1:Update:Test/.chromium.new/chromium.changes 2012-01-31 12:15:26.000000000 +0100 @@ -1,0 +2,68 @@ +Sun Jan 29 21:11:37 UTC 2012 - tittiatcoke@gmail.com + +- Update to 18.0.1022 + * Security fixes (bnc#743319) + + CVE-2011-3924 Use-after-free vulnerability + + CVE-2011-3925 Use-after-free vulnerability + + CVE-2011-3926 Heap-based buffer overflow in the tree builder + + CVE-2011-3927 Skia does not perform all required + initialization of values + + CVE-2011-3928 Use-after-free vulnerability + * Compile the chrome_sandbox binary with -fPIE flags + +------------------------------------------------------------------- +Mon Jan 23 09:44:42 UTC 2012 - tittiatcoke@gmail.com + +- Update to 18.0.1017 + * Security Issues fixed (bnc#740493) + + CVE-2011-3921 Use-after-free in animation frames + + CVE-2011-3919 Heap-buffer-overflow in libxml + + CVE-2011-3922 Stack-buffer-overflow in glyph handling + +------------------------------------------------------------------- +Sat Dec 31 22:29:20 UTC 2011 - tittiatcoke@gmail.com + +- Update to 18.0.992 + * Delay some extension startup until after first run import. + (issue 108286) + * Add function support for Sleep with TimeDelta input. + (issue 108171) + * Make webstore installs work when the Downloads folder is missing. + (issue 108812) + * Disable GL_EXT_texture_storage support in Linux. (issue 107782) + +------------------------------------------------------------------- +Wed Dec 28 12:00:11 UTC 2011 - tittiatcoke@gmail.com + +- Update to 18.0.985 + + Webkit layout: + * Suppress a leak in http/tests/appcache/reload.html + (issue 108621) + * Suppress a leak in xmlhttprequest/workers/referer.html + (issue 108622) + * Extend the suppression for uninit value in + fast/forms/input-text-paste-maxlength.html (issue 106183) + * Suppress memory leaks in + fast/files/workers/worker-read-blob-async.html + (issue 108624) + * Suppress a leak in + websocket/tests/hybi/workers/receive-arraybuffer.html + (issue 108627) + * Suppress a leak in + http/tests/xmlhttprequest/workers/methods-async.html + (issue 108628) + + Set opaque on the WebMediaPlayerClient based on the decoder + +------------------------------------------------------------------- +Mon Dec 19 06:41:16 UTC 2011 - tittiatcoke@gmail.com + +- Update to 18.0.975 + + Updating extensions code to use UTF16. (issue#71980) + + Assign F5 to cycle forward (issue#107417) + + [Sync] Add NOTREACHED for empty passphrase (issue#104189) + + Add libudev as build-dependency (issue#79050) + + Enable mnemonic and bookmark folder key activation on menu + (issue#107869) +- Removed conflict with xine-browser-plugins. + +------------------------------------------------------------------- Old: ---- chromium-no-sqlite-debug.patch chromium.18.0.972.0.svn.tar.lzma New: ---- chromium-new-glib.patch chromium-sandbox-pie.patch chromium.18.0.1022.0.svn119632.tar.lzma ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package chromium # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,16 +15,17 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # -%define v8_ver 3.7.12.6 +%define v8_ver 3.8.9.0 +%define svn_revision 119632 Name: chromium -Version: 18.0.972.0 +Version: 18.0.1022.0 Release: 0 Summary: Google's opens source browser project License: BSD-3-Clause and LGPL-2.1+ Group: Productivity/Networking/Web/Browsers Url: http://code.google.com/p/chromium/ -Source0: %{name}.%{version}.svn.tar.lzma +Source0: %{name}.%{version}.svn%{svn_revision}.tar.lzma %if 0%{?suse_version} <= 1140 Source1: %{name}.easy Source2: %{name}-rpmlintrc @@ -41,14 +42,11 @@ Provides: chromium-browser = %{version} Provides: chromium-based-browser = %{version} Obsoletes: chromium-browser < %{version} -Conflicts: xine-browser-plugin ## Start Patches # Many changes to the gyp systems so we can use system libraries # PATCH-FIX-OPENSUSE Fix build with GCC 4.6 Patch1: chromium-gcc46.patch -# PATCH-FIX-OPENSUSE disable debug for sqlite -Patch4: chromium-no-sqlite-debug.patch # PATCH-FIX-OPENSUSE patches in system zlib library Patch8: chromium-codechanges-zlib.patch # PATCH-FIX-OPENSUSE removes build part for courgette @@ -75,6 +73,12 @@ Patch63: chromium-6.0.406.0-system-gyp-v8.patch # PATCH-FIX-UPSTREAM Add more charset aliases Patch64: chromium-more-codec-aliases.patch +%if 0%{?suse_version} > 1210 +# PATCH-FIX-UPSTREAM Only include glib.h +Patch65: chromium-new-glib.patch +%endif +# PATCH-FIX-OPENSUSE Compile the sandbox with -fPIE settings +Patch66: chromium-sandbox-pie.patch %if 0%{?suse_version} > 1210 BuildRequires: libjpeg8-devel @@ -95,7 +99,6 @@ BuildRequires: libevent BuildRequires: libexpat-devel BuildRequires: libgnutls-devel -#BuildRequires: libjpeg-devel BuildRequires: libpng-devel BuildRequires: libstdc++-devel BuildRequires: libvpx-devel @@ -104,18 +107,15 @@ BuildRequires: lzma BuildRequires: mozilla-nspr-devel BuildRequires: mozilla-nss-devel +BuildRequires: krb5-devel BuildRequires: openssl-devel BuildRequires: pam-devel BuildRequires: pkg-config -BuildRequires: perl(Switch) -%if 0%{?suse_version} <= 1120 -BuildRequires: cairo-devel -BuildRequires: dbus-1-devel -BuildRequires: gconf2-devel -BuildRequires: glib2-devel -BuildRequires: gtk2-devel -BuildRequires: libxml-devel +%if 0%{?suse_version} > 1210 +BuildRequires: perl-Switch %else +BuildRequires: perl(Switch) +%endif BuildRequires: pkgconfig(cairo) >= 1.6 BuildRequires: pkgconfig(dbus-1) BuildRequires: dbus-1-glib-devel @@ -123,7 +123,6 @@ BuildRequires: pkgconfig(glib-2.0) BuildRequires: pkgconfig(gtk+-2.0) BuildRequires: pkgconfig(libxml-2.0) -%endif BuildRequires: dbus-1-glib-devel BuildRequires: python BuildRequires: python-xml @@ -134,21 +133,15 @@ BuildRequires: zlib-devel BuildRequires: libpulse-devel BuildRequires: libelf-devel -%if 0%{?suse_version} > 1120 BuildRequires: libgnome-keyring-devel -%else -BuildRequires: gnome-keyring-devel -%endif -%if 0%{?suse_version} > 1130 BuildRequires: python-devel -%endif - -%if 0%{?suse_version} >= 1110 BuildRequires: libevent-devel BuildRequires: libicu-devel >= 4.0 -%endif BuildRequires: speex-devel BuildRequires: hicolor-icon-theme +%if 0%{?suse_version} < 1210 +BuildRequires: libudev-devel +%endif # For NaCl %ifarch x86_64 BuildRequires: glibc-32bit @@ -180,6 +173,7 @@ %package desktop-kde Summary: Update to chromium to use KDE's kwallet to store passwords +Group: Productivity/Networking/Web/Browsers Supplements: packageand(chromium:kdebase4-session) Conflicts: chromium-desktop-gnome Provides: Chromium-password = %{version} @@ -193,6 +187,7 @@ %package desktop-gnome Summary: Update to chromium to use Gnome keyring to store passwords +Group: Productivity/Networking/Web/Browsers Supplements: packageand(chromium:gnome-session) Conflicts: chromium-desktop-kde Provides: Chromium-password = %{version} @@ -206,6 +201,7 @@ %package suid-helper Summary: A suid helper to let a process willingly drop privileges on Linux +Group: Productivity/Networking/Web/Browsers Url: http://code.google.com/p/setuid-sandbox/ Requires(pre): permissions @@ -227,6 +223,9 @@ %patch62 -p1 %patch63 -p1 %patch64 +%if 0%{?suse_version} > 1210 +%patch65 -p1 +%endif %patch8 -p1 %patch13 -p1 %patch14 -p1 @@ -239,7 +238,9 @@ %patch26 -p1 %patch28 -p1 %patch32 -p1 -%patch4 -p1 +%patch66 -p1 + +echo "%{svn_revision}" > src/build/LASTCHANGE.in pushd src/third_party/ffmpeg/ tar xf %{SOURCE8} @@ -285,7 +286,7 @@ -Duse_system_bzip2=1 \ -Duse_system_libbz2=1 \ %if 0%{?suse_version} > 1210 --Duse_system_libjpeg=1 \ +-Duse_system_libjpeg=0 \ %else -Duse_system_libjpeg=0 \ %endif ++++++ chromium-6.0.406.0-system-gyp-v8.patch ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -1,17 +1,21 @@ ---- chromium/src/build/all.gyp 2010-11-25 19:17:16.000000000 +0100 -+++ new/src/build/all.gyp 2010-11-25 21:05:09.413000018 +0100 -@@ -51,7 +51,7 @@ +Index: chromium/src/build/all.gyp +=================================================================== +--- chromium.orig/src/build/all.gyp ++++ chromium/src/build/all.gyp +@@ -50,7 +50,7 @@ '../third_party/sqlite/sqlite.gyp:*', - '../third_party/WebKit/Source/WebKit/chromium/WebKit.gyp:*', + '../third_party/WebKit/Source/WebKit/chromium/All.gyp:*', '../third_party/zlib/zlib.gyp:*', - '../v8/tools/gyp/v8.gyp:*', + 'linux/system.gyp:v8', '../webkit/support/webkit_support.gyp:*', '../webkit/webkit.gyp:*', 'util/build_util.gyp:*', ---- chromium/src/build/linux/system.gyp 2010-11-20 23:07:46.000000000 +0100 -+++ new/src/build/linux/system.gyp 2010-11-25 21:05:09.418000018 +0100 -@@ -359,6 +359,19 @@ +Index: chromium/src/build/linux/system.gyp +=================================================================== +--- chromium.orig/src/build/linux/system.gyp ++++ chromium/src/build/linux/system.gyp +@@ -380,6 +380,19 @@ ], }, { @@ -31,9 +35,11 @@ 'target_name': 'gnome_keyring', 'type': 'none', 'conditions': [ ---- chromium/src/net/net.gyp 2010-11-25 19:17:15.000000000 +0100 -+++ new/src/net/net.gyp 2010-11-25 21:05:09.427000018 +0100 -@@ -717,7 +717,7 @@ +Index: chromium/src/net/net.gyp +=================================================================== +--- chromium.orig/src/net/net.gyp ++++ chromium/src/net/net.gyp +@@ -35,7 +35,7 @@ '../third_party/icu/icu.gyp:icui18n', '../third_party/icu/icu.gyp:icuuc', '../third_party/zlib/zlib.gyp:zlib', @@ -42,9 +48,11 @@ 'net_resources', 'ssl_false_start_blacklist_process#host', ], ---- chromium/src/third_party/WebKit/Source/WebCore/WebCore.gyp/WebCore.gyp 2010-11-20 23:09:21.000000000 +0100 -+++ new/src/third_party/WebKit/Source/WebCore/WebCore.gyp/WebCore.gyp 2010-11-25 21:05:09.435000018 +0100 -@@ -960,7 +960,7 @@ +Index: chromium/src/third_party/WebKit/Source/WebCore/WebCore.gyp/WebCore.gyp +=================================================================== +--- chromium.orig/src/third_party/WebKit/Source/WebCore/WebCore.gyp/WebCore.gyp ++++ chromium/src/third_party/WebKit/Source/WebCore/WebCore.gyp/WebCore.gyp +@@ -1070,7 +1070,7 @@ '<(chromium_src_dir)/third_party/libwebp/libwebp.gyp:libwebp', '<(chromium_src_dir)/third_party/npapi/npapi.gyp:npapi', '<(chromium_src_dir)/third_party/sqlite/sqlite.gyp:sqlite', @@ -53,7 +61,7 @@ '<(libjpeg_gyp_path):libjpeg', ], 'include_dirs': [ -@@ -1078,7 +1078,7 @@ +@@ -1189,7 +1189,7 @@ '<(chromium_src_dir)/third_party/ots/ots.gyp:ots', '<(chromium_src_dir)/third_party/sqlite/sqlite.gyp:sqlite', '<(chromium_src_dir)/third_party/angle/src/build_angle.gyp:translator_glsl', @@ -62,7 +70,7 @@ '<(libjpeg_gyp_path):libjpeg', ], 'export_dependent_settings': [ -@@ -1095,7 +1095,7 @@ +@@ -1207,7 +1207,7 @@ '<(chromium_src_dir)/third_party/ots/ots.gyp:ots', '<(chromium_src_dir)/third_party/sqlite/sqlite.gyp:sqlite', '<(chromium_src_dir)/third_party/angle/src/build_angle.gyp:translator_glsl', @@ -71,7 +79,7 @@ '<(libjpeg_gyp_path):libjpeg', ], # This is needed for mac because of webkit_system_interface. It'd be nice -@@ -1820,7 +1820,7 @@ +@@ -1967,7 +1967,7 @@ '<(chromium_src_dir)/build/temp_gyp/googleurl.gyp:googleurl', '<(chromium_src_dir)/skia/skia.gyp:skia', '<(chromium_src_dir)/third_party/npapi/npapi.gyp:npapi', @@ -80,7 +88,7 @@ ], 'export_dependent_settings': [ 'webcore_bindings', -@@ -1828,7 +1828,7 @@ +@@ -1976,7 +1976,7 @@ '<(chromium_src_dir)/build/temp_gyp/googleurl.gyp:googleurl', '<(chromium_src_dir)/skia/skia.gyp:skia', '<(chromium_src_dir)/third_party/npapi/npapi.gyp:npapi', ++++++ chromium-browser.sh ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -74,7 +74,7 @@ "use_system": true } }, - "homepage": "http://meego.com/", + "homepage": "http://www.opensuse.org/", "homepage_is_newtabpage": false, "session": { "restore_on_startup": 1 @@ -111,6 +111,6 @@ $GDB "$LIBDIR/$APPNAME" -x $tmpfile exit $? else - exec $LIBDIR/$APPNAME $SANDBOX "--password-store=detect" "--enable-experimental-extension-apis" "--enable-plugins" "--enable-extensions" "--enable-user-scripts" "--enable-printing" "--enable-sync" "--auto-ssl-client-auth" "$@" + exec $LIBDIR/$APPNAME $SANDBOX "--password-store=detect" "$@" fi ++++++ chromium-gcc46.patch ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -8,16 +8,6 @@ #include "ui/base/ui_export.h" ---- chromium/src/chrome/browser/search_engines/template_url_prepopulate_data.h 2011-03-31 14:48:03.000000000 +0400 -+++ chromium/src/chrome/browser/search_engines/template_url_prepopulate_data.h 2011-03-31 14:49:52.000000000 +0400 -@@ -9,6 +9,7 @@ - #include <stddef.h> - #include <string> - #include <vector> -+#include <cstddef> - - class GURL; - class PrefService; --- chromium/src/third_party/tcmalloc/chromium/src/common.cc~ 2011-03-29 20:46:14.000000000 +0400 +++ chromium/src/third_party/tcmalloc/chromium/src/common.cc 2011-03-29 20:47:02.000000000 +0400 @@ -30,6 +30,7 @@ @@ -88,13 +78,3 @@ #include <stddef.h> // for size_t class SysAllocator; ---- chromium/src/ppapi/cpp/paint_aggregator.h 2010-12-23 18:10:27.000000000 -0600 -+++ chromium/src/ppapi/cpp/paint_aggregator.h 2011-04-19 05:34:56.085582885 -0500 -@@ -5,6 +5,7 @@ - #ifndef PPAPI_CPP_PAINT_AGGREGATOR_H_ - #define PPAPI_CPP_PAINT_AGGREGATOR_H_ - -+#include <cstddef> - #include <stddef.h> - #include <vector> - ++++++ chromium-master-prefs-path.patch ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -1,8 +1,9 @@ -diff -dupr a/src/chrome/browser/first_run.cc b/src/chrome/browser/first_run.cc ---- a/src/chrome/browser/first_run/first_run_gtk.cc 2010-03-10 10:21:33.000000000 -0700 -+++ b/src/chrome/browser/first_run/first_run_gtk.cc 2010-03-10 13:08:12.000000000 -0700 -@@ -63,7 +63,6 @@ - FilePath FirstRun::MasterPrefsPath() { +Index: chromium/src/chrome/browser/first_run/first_run_linux.cc +=================================================================== +--- chromium.orig/src/chrome/browser/first_run/first_run_linux.cc ++++ chromium/src/chrome/browser/first_run/first_run_linux.cc +@@ -100,8 +100,7 @@ void AutoImport( + FilePath MasterPrefsPath() { // The standard location of the master prefs is next to the chrome binary. FilePath master_prefs; - if (!PathService::Get(base::DIR_EXE, &master_prefs)) @@ -10,3 +11,4 @@ + master_prefs = FilePath("/etc/chromium"); return master_prefs.AppendASCII(installer::kDefaultMasterPrefs); } + ++++++ chromium-new-glib.patch ++++++ Index: chromium/src/ui/base/l10n/l10n_util.cc =================================================================== --- chromium.orig/src/ui/base/l10n/l10n_util.cc +++ chromium/src/ui/base/l10n/l10n_util.cc @@ -5,7 +5,7 @@ #include "ui/base/l10n/l10n_util.h" #if defined(USE_X11) -#include <glib/gutils.h> +#include <glib.h> #endif #include <algorithm> ++++++ chromium-rpmlintrc ++++++ --- /var/tmp/diff_new_pack.PVGX6N/_old 2012-01-31 12:15:38.000000000 +0100 +++ /var/tmp/diff_new_pack.PVGX6N/_new 2012-01-31 12:15:38.000000000 +0100 @@ -1 +1 @@ -setBadness("permissions-unauthorized-file", 0) +addFilter("permissions-unauthorized-file") ++++++ chromium-sandbox-pie.patch ++++++ --- chromium/src/sandbox/sandbox.gyp 2011-11-15 19:35:11.119851877 +0100 +++ chromium/src/sandbox/sandbox.gyp 2012-01-25 23:24:53.914568688 +0100 @@ -163,7 +163,10 @@ ], 'cflags': [ # For ULLONG_MAX - '-std=gnu99', + '-std=gnu99 -fPIE', + ], + 'ldflags': [ + '-pie', ], 'include_dirs': [ '..', -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org