Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2026-02-05 17:57:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.1670 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Thu Feb 5 17:57:19 2026 rev:499 rq:1330919 version:144.0.7559.132 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2026-01-29 17:47:57.544990843 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new.1670/chromium.changes 2026-02-05 18:00:45.284499578 +0100 @@ -1,0 +2,30 @@ +Wed Feb 4 09:55:40 UTC 2026 - Ruediger Oertel <[email protected]> + +- Chromium 144.0.7559.132 (boo#1257650) + * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome + prior to 144.0.7559.132 allowed a remote attacker to potentially + exploit heap corruption via a crafted HTML page. + * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to + 144.0.7559.132 allowed a remote attacker to potentially exploit + heap corruption via a crafted HTML page. +- removed patches: + * chromium-134-revert-rust-adler2.patch + * chromium-144-rust-adler2.patch + (obsolete, automatic if rust_nightly is set properly) +- added patches: + * force-rust-nightly.patch +- try rust1.93 for tumbleweed, 1.92 for older +- gn flags: + add toolchain_supports_rust_thin_lto=false to be able to build + with a llvm older than the one vendored in rust +- use llvm21 for tumbleweed +- drop qt5 parts from spec, not used + +------------------------------------------------------------------- +Thu Jan 29 16:12:49 UTC 2026 - Ruediger Oertel <[email protected]> + +- use nodejs-common and use the version from /usr/bin/node +- but use nodejs22 for code15 (while nodejs-common still + points to nodejs14 there) + +------------------------------------------------------------------- Old: ---- chromium-134-revert-rust-adler2.patch chromium-144-rust-adler2.patch chromium-144.0.7559.109-linux.tar.xz New: ---- chromium-144.0.7559.132-linux.tar.xz force-rust-nightly.patch ----------(Old B)---------- Old:- removed patches: * chromium-134-revert-rust-adler2.patch * chromium-144-rust-adler2.patch Old: * chromium-134-revert-rust-adler2.patch * chromium-144-rust-adler2.patch (obsolete, automatic if rust_nightly is set properly) ----------(Old E)---------- ----------(New B)---------- New:- added patches: * force-rust-nightly.patch - try rust1.93 for tumbleweed, 1.92 for older ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.U399GK/_old 2026-02-05 18:00:56.248959508 +0100 +++ /var/tmp/diff_new_pack.U399GK/_new 2026-02-05 18:00:56.260960011 +0100 @@ -28,10 +28,8 @@ # suse_version 1699 tw %if 0%{?suse_version} >= 1600 || 0%{?sle_version} >= 150400 %bcond_without gtk4 -%bcond_without qt5 %else %bcond_with gtk4 -%bcond_with qt5 %endif %ifarch aarch64 ppc64le riscv64 # ERROR Unresolved dependencies. @@ -62,14 +60,19 @@ %bcond_without noopenh264 %define ffmpeg_version 59 %bcond_with system_zstd -%define node_ver 22 -%define node_ver_next 23 -%define node_version %(rpm -q --qf "%%{version}" nodejs%{node_ver}) +%if 0%{?suse_version} > 1600 +# LLVM version +%define llvm_version 21 +%define llvm_version_long 21.1.8 +# RUST version +%define rust_version 1.93 +%else # LLVM version %define llvm_version 19 %define llvm_version_long 19.1.7 # RUST version -%define rust_version 1.86 +%define rust_version 1.92 +%endif # GCC version %define gcc_version 14 # esbuild version @@ -124,7 +127,7 @@ %global official_build 1 Name: chromium%{n_suffix} -Version: 144.0.7559.109 +Version: 144.0.7559.132 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -181,6 +184,7 @@ Patch387: chromium-143-cookie_string_view.patch Patch389: chromium-143-revert_rust_is_multiple_of.patch Patch390: chromium-144-revert_gfx_value_or.patch +Patch393: force-rust-nightly.patch # conditionally applied patches ppc64le only Patch401: ppc-fedora-add-ppc64-architecture-string.patch Patch402: ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch @@ -245,10 +249,6 @@ Patch1010: chromium-124-system-libxml.patch # patch where libxml < 2.13 Patch1011: chromium-144-revert-libxml-2.13.patch -# patch where rust = 1.85 -Patch1030: chromium-134-revert-rust-adler2.patch -# patch where rust = 1.86 -Patch1031: chromium-144-rust-adler2.patch # gtk4 is too old Patch1040: gtk-414.patch Patch1041: gtk-414-2.patch @@ -279,7 +279,11 @@ BuildRequires: ninja >= 1.7.2 BuildRequires: pam-devel BuildRequires: pkgconfig -BuildRequires: (nodejs >= %node_ver.0 with nodejs < %node_ver_next.0) +%if 0%{?suse_version} >= 1600 +BuildRequires: nodejs-common +%else +BuildRequires: nodejs22 +%endif %if 0%{?suse_version} >= 1600 BuildRequires: python3 BuildRequires: python3-setuptools @@ -437,11 +441,6 @@ BuildRequires: pkgconfig(libavif) BuildRequires: pkgconfig(libyuv) %endif -%if %{with qt5} -BuildRequires: pkgconfig(Qt5Core) -BuildRequires: pkgconfig(Qt5Gui) -BuildRequires: pkgconfig(Qt5Widgets) -%endif %if %{with qt6} BuildRequires: pkgconfig(Qt6Core) BuildRequires: pkgconfig(Qt6Gui) @@ -514,14 +513,6 @@ %patch -p1 -P 1011 %endif -%if "%{?rust_version}" == "1.85" -%patch -p1 -P 1030 -%endif - -%if "%{?rust_version}" == "1.86" -%patch -p1 -P 1031 -%endif - %if %{without gtk4_4_19} %patch -p1 -R -P 1041 %patch -p1 -R -P 1040 @@ -550,7 +541,8 @@ mkdir -p third_party/node/linux/node-linux-x64/bin rm -f third_party/node/linux/node-linux-x64/bin/node ln -s %{_bindir}/node third_party/node/linux/node-linux-x64/bin/node -sed -i -e "s@^NODE_VERSION=.*@NODE_VERSION=\"v%{node_version}\"@" third_party/node/update_node_binaries +node_version=$(/usr/bin/node --version) +sed -i -e "s@^NODE_VERSION=.*@NODE_VERSION=\"${node_version}\"@" third_party/node/update_node_binaries # python3 mkdir -p $HOME/bin @@ -1086,11 +1078,7 @@ %if %{with gtk4} myconf_gn+=" gtk_version=4" %endif -%if %{without qt5} myconf_gn+=" use_qt5=false" -%else -myconf_gn+=" moc_qt5_path=\"%{_libqt5_bindir}\"" -%endif %if %{with qt6} myconf_gn+=" use_qt6=true" myconf_gn+=" moc_qt6_path=\"%{?_qt6_libexecdir}\"" @@ -1142,6 +1130,9 @@ if [ "$clang_version" -lt 20 ] ; then myconf_gn+=" clang_warning_suppression_file=\"\"" fi +if [ "$clang_version" -lt 21 ] ; then +myconf_gn+=" toolchain_supports_rust_thin_lto=false" +fi myconf_gn+=" chrome_pgo_phase=0" # GN does not support passing cflags: ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.U399GK/_old 2026-02-05 18:00:56.648976288 +0100 +++ /var/tmp/diff_new_pack.U399GK/_new 2026-02-05 18:00:56.656976623 +0100 @@ -1,6 +1,6 @@ -mtime: 1769607415 -commit: 3f92896b062b853f7815d511595cea7a1fca9743f5f4878355520fe347d4a49a +mtime: 1770200885 +commit: f98d6401681bf5794a3e5a192532713af4f31ca6ea738c3221cb310f74521c8b url: https://src.opensuse.org/chromium/chromium.git -revision: 3f92896b062b853f7815d511595cea7a1fca9743f5f4878355520fe347d4a49a +revision: f98d6401681bf5794a3e5a192532713af4f31ca6ea738c3221cb310f74521c8b projectscmsync: https://src.opensuse.org/chromium/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-02-04 11:34:56.000000000 +0100 @@ -0,0 +1,4 @@ +.osc +*.patch~ +*-build/ +.*.swp ++++++ chromium-144.0.7559.109-linux.tar.xz -> chromium-144.0.7559.132-linux.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-144.0.7559.109-linux.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.1670/chromium-144.0.7559.132-linux.tar.xz differ: char 16, line 1 ++++++ force-rust-nightly.patch ++++++ --- a/build/config/rust.gni +++ b/build/config/rust.gni @@ -112,7 +112,7 @@ use_chromium_rust_toolchain = rust_sysro # `rustc_nightly_capability = false` will make the build avoid the use of # Rust nightly features. There are no bots that test this and there is no # guarantee it will work, but we accept patches for this configuration. -rustc_nightly_capability = use_chromium_rust_toolchain +rustc_nightly_capability = true # Platform support for the Rust toolchain. chromium_toolchain_supports_platform = !is_wasm
