commit chromium for openSUSE:Factory
![](https://seccdn.libravatar.org/avatar/e2145bc5cf53dda95c308a3c75e8fef3.jpg?s=120&d=mm&r=g)
Hello community,
here is the log from the commit of package chromium for openSUSE:Factory checked in at 2017-07-27 11:12:51
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/chromium (Old)
and /work/SRC/openSUSE:Factory/.chromium.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium"
Thu Jul 27 11:12:51 2017 rev:160 rq:512664 version:60.0.3112.78
Changes:
--------
--- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2017-06-24 08:35:15.669543395 +0200
+++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2017-07-27 11:13:22.671863243 +0200
@@ -1,0 +2,46 @@
+Wed Jul 26 13:27:55 UTC 2017 - tchvatal@suse.com
+
+- Version update to 60.0.3112.78 bsc#1050537:
+ * CVE-2017-5091: Use after free in IndexedDB
+ * CVE-2017-5092: Use after free in PPAPI
+ * CVE-2017-5093: UI spoofing in Blink
+ * CVE-2017-5094: Type confusion in extensions
+ * CVE-2017-5095: Out-of-bounds write in PDFium
+ * CVE-2017-5096: User information leak via Android intents
+ * CVE-2017-5097: Out-of-bounds read in Skia
+ * CVE-2017-5098: Use after free in V8
+ * CVE-2017-5099: Out-of-bounds write in PPAPI
+ * CVE-2017-5100: Use after free in Chrome Apps
+ * CVE-2017-5101: URL spoofing in OmniBox
+ * CVE-2017-5102: Uninitialized use in Skia
+ * CVE-2017-5103: Uninitialized use in Skia
+ * CVE-2017-5104: UI spoofing in browser
+ * CVE-2017-7000: Pointer disclosure in SQLite
+ * CVE-2017-5105: URL spoofing in OmniBox
+ * CVE-2017-5106: URL spoofing in OmniBox
+ * CVE-2017-5107: User information leak via SVG
+ * CVE-2017-5108: Type confusion in PDFium
+ * CVE-2017-5109: UI spoofing in browser
+ * CVE-2017-5110: UI spoofing in payments dialog
+ * Various fixes from internal audits, fuzzing and other initiatives
+- Add patch chromium-override.patch
+- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
+- Rebase patches:
+ * chromium-dma-buf.patch
+ * chromium-gcc7.patch
+ * chromium-last-commit-position-r0.patch
+ * fix-gn-bootstrap.diff
+
+-------------------------------------------------------------------
+Mon Jul 24 09:01:07 UTC 2017 - tchvatal@suse.com
+
+- Recommend emoji fonts to make sure major web chats do not show
+ questionmarks
+
+------------------------------------------------------------------
+Wed Jun 28 19:27:55 UTC 2017 - tchvatal@suse.com
+
+- Update to 59.0.3071.115:
+ * Various small fixes all around
+
+-------------------------------------------------------------------
Old:
----
chromium-59.0.3071.109.tar.xz
chromium-fpermissive.patch
chromium-system-ffmpeg-r3.patch
New:
----
chromium-60.0.3112.78.tar.xz
chromium-override.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ chromium.spec ++++++
--- /var/tmp/diff_new_pack.0wU51d/_old 2017-07-27 11:13:39.249521541 +0200
+++ /var/tmp/diff_new_pack.0wU51d/_new 2017-07-27 11:13:39.249521541 +0200
@@ -17,9 +17,6 @@
%define rname chromium
-%bcond_with system_vpx
-%bcond_with system_icu
-%bcond_with system_libxml
%if %{?suse_version} >= 1320 || (%{?suse_version} == 1315 && 0%{?leap_version} >= 420200)
%bcond_without system_minizip
%bcond_without system_harfbuzz
@@ -33,9 +30,12 @@
%else
%bcond_without sle_bundles
%endif
+%bcond_with system_icu
+%bcond_with system_libxml
+%bcond_with system_vpx
%bcond_with clang
Name: chromium
-Version: 59.0.3071.109
+Version: 60.0.3112.78
Release: 0
Summary: Google's open source browser project
License: BSD-3-Clause and LGPL-2.1+
@@ -64,13 +64,11 @@
Patch6: fix_building_widevinecdm_with_chromium.patch
# PATCH-FIX-OPENSUSE fix_network_api_crash.patch - Fix crash in network API, e.g. when using chromecast extension
Patch7: fix_network_api_crash.patch
-# System libs
-Patch8: chromium-system-ffmpeg-r3.patch
# Gcc fix
Patch10: gcc60-fixes.diff
Patch11: chromium-gcc7.patch
Patch12: chromium-dma-buf.patch
-Patch13: chromium-fpermissive.patch
+Patch13: chromium-override.patch
Patch14: chromium-buildname.patch
# archlinux arm enhancement patches
Patch100: arm-webrtc-fix.patch
@@ -110,6 +108,7 @@
BuildRequires: update-desktop-files
BuildRequires: util-linux
BuildRequires: wdiff
+BuildRequires: yasm
BuildRequires: perl(Switch)
BuildRequires: pkgconfig(alsa)
BuildRequires: pkgconfig(bzip2)
@@ -130,6 +129,10 @@
BuildRequires: pkgconfig(kadm-client)
BuildRequires: pkgconfig(kdb)
BuildRequires: pkgconfig(krb5)
+BuildRequires: pkgconfig(libavcodec)
+BuildRequires: pkgconfig(libavfilter)
+BuildRequires: pkgconfig(libavformat) >= 57.41.100
+BuildRequires: pkgconfig(libavutil)
BuildRequires: pkgconfig(libcrypto)
BuildRequires: pkgconfig(libdc1394-2)
BuildRequires: pkgconfig(libdrm)
@@ -143,14 +146,12 @@
BuildRequires: pkgconfig(libtcmalloc)
BuildRequires: pkgconfig(libudev)
BuildRequires: pkgconfig(libwebp)
-%if %{with system_libxml}
-BuildRequires: pkgconfig(libxml-2.0)
-%endif
BuildRequires: pkgconfig(libxslt)
BuildRequires: pkgconfig(nspr) >= 4.9.5
BuildRequires: pkgconfig(nss) >= 3.14
BuildRequires: pkgconfig(ogg)
BuildRequires: pkgconfig(openssl)
+BuildRequires: pkgconfig(opus)
BuildRequires: pkgconfig(python)
BuildRequires: pkgconfig(schroedinger-1.0)
BuildRequires: pkgconfig(slang)
@@ -175,6 +176,8 @@
Requires: hicolor-icon-theme
Requires: xdg-utils
Requires(pre): permissions
+Recommends: noto-coloremoji-fonts
+Recommends: noto-emoji-fonts
Conflicts: otherproviders(chromium-browser)
Provides: chromium-based-browser = %{version}
Provides: chromium-browser = %{version}
@@ -187,10 +190,15 @@
Obsoletes: chromium-desktop-kde
Obsoletes: chromium-dev-desktop-gnome
Obsoletes: chromium-dev-desktop-kde
+Obsoletes: chromium-ffmpeg
+Obsoletes: chromium-ffmpegsumo
# There is no v8 for ppc and thus chromium won't run on ppc. For aarch64
# certain buildrequires are missing (e.g. valgrind)
# while it would build for %arm, we exclude it as it takes forever to build
ExcludeArch: %{arm} aarch64 i586 ppc ppc64 ppc64le
+%if %{with system_libxml}
+BuildRequires: pkgconfig(libxml-2.0)
+%endif
%if !%{with sle_bundles}
BuildRequires: python-beautifulsoup4
BuildRequires: python-html5lib
@@ -210,14 +218,6 @@
%if %{with system_vpx}
BuildRequires: pkgconfig(vpx) >= 1.6.1
%endif
-BuildRequires: pkgconfig(libavcodec)
-BuildRequires: pkgconfig(libavfilter)
-BuildRequires: pkgconfig(libavformat) >= 57.41.100
-BuildRequires: pkgconfig(libavutil)
-Conflicts: otherproviders(ffmpegsumo)
-Obsoletes: chromium-ffmpeg
-Obsoletes: chromium-ffmpegsumo
-Provides: ffmpegsumo = %{version}
%if %{with clang}
BuildRequires: clang >= 3.9.0
%else
@@ -253,7 +253,6 @@
%patch5 -p1
%patch6 -p1
%patch7
-%patch8 -p1
%if !%{with clang}
%patch10
%patch11 -p1
@@ -310,6 +309,7 @@
third_party/catapult/tracing/third_party/gl-matrix
third_party/catapult/tracing/third_party/jszip
third_party/catapult/tracing/third_party/mannwhitneyu
+ third_party/catapult/tracing/third_party/oboe
third_party/ced
third_party/cld_2
third_party/cld_3
@@ -320,9 +320,11 @@
third_party/flatbuffers
third_party/flot
third_party/freetype
+ third_party/glslang-angle
third_party/google_input_tools
third_party/google_input_tools/third_party/closure_library
third_party/google_input_tools/third_party/closure_library/third_party/closure
+ third_party/googletest
third_party/hunspell
third_party/iccjpeg
third_party/inspector_protocol
@@ -352,7 +354,6 @@
third_party/node/node_modules/vulcanize/third_party/UglifyJS2
third_party/openh264
third_party/openmax_dl
- third_party/opus
third_party/ots
third_party/pdfium
third_party/pdfium/third_party/agg23
@@ -371,20 +372,23 @@
third_party/qcms
third_party/sfntly
third_party/skia
+ third_party/skia/third_party/vulkan
third_party/smhasher
+ third_party/spirv-headers
+ third_party/spirv-tools-angle
third_party/sqlite
third_party/swiftshader
third_party/swiftshader/third_party/llvm-subzero
- third_party/swiftshader/third_party/pnacl-subzero
third_party/swiftshader/third_party/subzero
third_party/tcmalloc
third_party/usrsctp
+ third_party/vulkan
+ third_party/vulkan-validation-layers
third_party/web-animations-js
third_party/webdriver
third_party/webrtc
third_party/widevine
third_party/woff2
- third_party/x86inc
third_party/zlib/google
url/third_party/mozilla
v8/src/third_party/valgrind
@@ -436,8 +440,8 @@
%else
# REDUCE DEBUG as it gets TOO large
ARCH_FLAGS="`echo %{optflags} | sed -e 's/^-g / /g' -e 's/ -g / /g' -e 's/ -g$//g'`"
-export CFLAGS="${ARCH_FLAGS}"
-export CXXFLAGS="${ARCH_FLAGS}"
+export CFLAGS="${ARCH_FLAGS} -std=gnu11 -fpermissive"
+export CXXFLAGS="${ARCH_FLAGS} -fpermissive"
export CC=gcc
export CXX=g++
%endif
@@ -464,8 +468,10 @@
libpng
libwebp
libxslt
+ opus
re2
snappy
+ yasm
)
%if !%{with sle_bundles}
gn_system_libraries+=( yasm )
++++++ chromium-59.0.3071.109.tar.xz -> chromium-60.0.3112.78.tar.xz ++++++
/work/SRC/openSUSE:Factory/chromium/chromium-59.0.3071.109.tar.xz /work/SRC/openSUSE:Factory/.chromium.new/chromium-60.0.3112.78.tar.xz differ: char 26, line 1
++++++ chromium-dma-buf.patch ++++++
--- /var/tmp/diff_new_pack.0wU51d/_old 2017-07-27 11:13:39.381502898 +0200
+++ /var/tmp/diff_new_pack.0wU51d/_new 2017-07-27 11:13:39.381502898 +0200
@@ -1,21 +1,22 @@
---- a/ui/gfx/linux/client_native_pixmap_dmabuf.cc.orig 2017-03-29 15:08:58.079790070 +0000
-+++ b/ui/gfx/linux/client_native_pixmap_dmabuf.cc 2017-03-29 15:09:10.068039324 +0000
-@@ -17,7 +17,6 @@
+Index: chromium-60.0.3088.3/ui/gfx/linux/client_native_pixmap_dmabuf.cc
+===================================================================
+--- chromium-60.0.3088.3.orig/ui/gfx/linux/client_native_pixmap_dmabuf.cc
++++ chromium-60.0.3088.3/ui/gfx/linux/client_native_pixmap_dmabuf.cc
+@@ -19,9 +19,6 @@
#include "base/strings/stringprintf.h"
#include "base/trace_event/trace_event.h"
--#if LINUX_VERSION_CODE < KERNEL_VERSION(4, 6, 0)
+-#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)
+-#include
participants (1)
-
root@hilbert.suse.de