Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2023-09-28 10:27:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chromium" Thu Sep 28 10:27:59 2023 rev:400 rq:1113938 version:117.0.5938.132 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2023-09-25 20:02:42.881103782 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.23327/chromium.changes 2023-09-28 10:38:40.703629162 +0200 @@ -1,0 +2,8 @@ +Wed Sep 27 21:39:34 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de> + +- Chromium 117.0.5938.132 (boo#1215776): + * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) + * CVE-2023-5186: Use after free in Passwords + * CVE-2023-5187: Use after free in Extensions + +------------------------------------------------------------------- Old: ---- chromium-117.0.5938.92.tar.xz New: ---- chromium-117.0.5938.132.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.UvO2MZ/_old 2023-09-28 10:38:59.280299298 +0200 +++ /var/tmp/diff_new_pack.UvO2MZ/_new 2023-09-28 10:38:59.280299298 +0200 @@ -85,7 +85,7 @@ %define n_suffix %{nil} %endif Name: chromium%{n_suffix} -Version: 117.0.5938.92 +Version: 117.0.5938.132 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later ++++++ chromium-117.0.5938.92.tar.xz -> chromium-117.0.5938.132.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-117.0.5938.92.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.23327/chromium-117.0.5938.132.tar.xz differ: char 15, line 1