Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package chromium for openSUSE:Factory 
checked in at 2021-06-01 10:33:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/chromium (Old)
 and      /work/SRC/openSUSE:Factory/.chromium.new.1898 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "chromium"

Tue Jun  1 10:33:06 2021 rev:293 rq:895838 version:91.0.4472.77

Changes:
--------
--- /work/SRC/openSUSE:Factory/chromium/chromium.changes        2021-05-20 
19:24:30.786077162 +0200
+++ /work/SRC/openSUSE:Factory/.chromium.new.1898/chromium.changes      
2021-06-01 10:33:25.528400732 +0200
@@ -1,0 +2,53 @@
+Thu May 27 05:12:18 UTC 2021 - Andreas Stieger <andreas.stie...@gmx.de>
+
+- Chromium 91.0.4472.77 (boo#1186458):
+  * Support Managed configuration API for Web Applications
+  * WebOTP API: cross-origin iframe support
+  * CSS custom counter styles
+  * Support JSON Modules
+  * Clipboard: read-only files support
+  * Remove webkitBeforeTextInserted & webkitEditableCOntentChanged
+    JS events
+  * Honor media HTML attribute for link icon
+  * Import Assertions
+  * Class static initializer blocks
+  * Ergonomic brand checks for private fields
+  * Expose WebAssembly SIMD
+  * New Feature: WebTransport
+  * ES Modules for service workers ('module' type option)
+  * Suggested file name and location for the File System Access API
+  * adaptivePTime property for RTCRtpEncodingParameters
+  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
+  * Support WebSockets over HTTP/2
+  * Support 103 Early Hints for Navigation
+  * CVE-2021-30521: Heap buffer overflow in Autofill
+  * CVE-2021-30522: Use after free in WebAudio
+  * CVE-2021-30523: Use after free in WebRTC
+  * CVE-2021-30524: Use after free in TabStrip
+  * CVE-2021-30525: Use after free in TabGroups
+  * CVE-2021-30526: Out of bounds write in TabStrip
+  * CVE-2021-30527: Use after free in WebUI
+  * CVE-2021-30528: Use after free in WebAuthentication
+  * CVE-2021-30529: Use after free in Bookmarks
+  * CVE-2021-30530: Out of bounds memory access in WebAudio
+  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
+  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
+  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
+  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
+  * CVE-2021-30535: Double free in ICU
+  * CVE-2021-21212: Insufficient data validation in networking
+  * CVE-2021-30536: Out of bounds read in V8
+  * CVE-2021-30537: Insufficient policy enforcement in cookies
+  * CVE-2021-30538: Insufficient policy enforcement in content security policy
+  * CVE-2021-30539: Insufficient policy enforcement in content security policy
+  * CVE-2021-30540: Incorrect security UI in payments
+  * Various fixes from internal audits, fuzzing and other initiatives
+  * drop chromium-90-TokenizedOutput-include.patch
+  * drop chromium-90-CrossThreadCopier-qualification.patch
+  * drop chromium-90-quantization_utils-include.patch
+  * drop chromium-90-angle-constexpr.patch
+  * add chromium-91-java-only-allowed-in-android-builds.patch
+  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
+  * add chromium-91-system-icu.patch
+
+-------------------------------------------------------------------

Old:
----
  chromium-90-CrossThreadCopier-qualification.patch
  chromium-90-TokenizedOutput-include.patch
  chromium-90-angle-constexpr.patch
  chromium-90-quantization_utils-include.patch
  chromium-90.0.4430.212.tar.xz

New:
----
  chromium-91-GCC_fix_vector_types_in_pcscan.patch
  chromium-91-java-only-allowed-in-android-builds.patch
  chromium-91-system-icu.patch
  chromium-91.0.4472.77.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ chromium.spec ++++++
--- /var/tmp/diff_new_pack.AEdH5l/_old  2021-06-01 10:33:35.024416902 +0200
+++ /var/tmp/diff_new_pack.AEdH5l/_new  2021-06-01 10:33:35.024416902 +0200
@@ -16,6 +16,7 @@
 #
 
 
+%define rname chromium
 # bsc#1108175
 %define __provides_exclude ^lib.*\\.so.*$
 %if 0%{?suse_version} > 1500
@@ -48,12 +49,12 @@
 %endif
 %bcond_with clang
 Name:           chromium
-Version:        90.0.4430.212
+Version:        91.0.4472.77
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
 URL:            https://www.chromium.org/
-Source0:        
https://commondatastorage.googleapis.com/chromium-browser-official/%{name}-%{version}.tar.xz
+Source0:        
https://commondatastorage.googleapis.com/chromium-browser-official/%{rname}-%{version}.tar.xz
 # Toolchain definitions
 Source30:       master_preferences
 Source100:      chromium-browser.sh
@@ -95,11 +96,10 @@
 Patch30:        chromium-shim_headers.patch
 Patch31:        chromium-89-missing-cstring-header.patch
 Patch33:        chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
-Patch34:        chromium-90-angle-constexpr.patch
-Patch35:        chromium-90-TokenizedOutput-include.patch
 Patch36:        chromium-90-ruy-include.patch
-Patch37:        chromium-90-CrossThreadCopier-qualification.patch
-Patch38:        chromium-90-quantization_utils-include.patch
+Patch40:        chromium-91-java-only-allowed-in-android-builds.patch
+Patch41:        chromium-91-GCC_fix_vector_types_in_pcscan.patch
+Patch42:        chromium-91-system-icu.patch
 # Google seem not too keen on merging this but GPU accel is quite important
 #  https://chromium-review.googlesource.com/c/chromium/src/+/532294
 #  
https://github.com/saiarcot895/chromium-ubuntu-build/tree/master/debian/patches
@@ -166,6 +166,7 @@
 BuildRequires:  pkgconfig(libavformat) >= 58
 BuildRequires:  pkgconfig(libavutil)
 BuildRequires:  pkgconfig(libcrypto)
+BuildRequires:  pkgconfig(libcurl)
 BuildRequires:  pkgconfig(libdc1394-2)
 BuildRequires:  pkgconfig(libdrm)
 BuildRequires:  pkgconfig(libelf)
@@ -278,7 +279,8 @@
 WebDriver is an open source tool for automated testing of webapps across many 
browsers. It provides capabilities for navigating to web pages, user input, 
JavaScript execution, and more. ChromeDriver is a standalone server which 
implements WebDriver's wire protocol for Chromium. It is being developed by 
members of the Chromium and WebDriver teams.
 
 %prep
-%autosetup -p1
+%setup -q -n %{rname}-%{version}
+%autopatch -p1
 
 %build
 # Fix the path to nodejs binary
@@ -379,6 +381,7 @@
     
third_party/google_input_tools/third_party/closure_library/third_party/closure
     third_party/googletest
     third_party/harfbuzz-ng/utils
+    third_party/highway
     third_party/hunspell
     third_party/iccjpeg
     third_party/inspector_protocol
@@ -396,6 +399,7 @@
     third_party/libgav1
     third_party/libgifcodec
     third_party/libjingle
+    third_party/libjxl
     third_party/libphonenumber
     third_party/libsecret
     third_party/libsrtp
@@ -454,7 +458,6 @@
     third_party/rnnoise
     third_party/ruy
     third_party/s2cellid
-    third_party/schema_org
     third_party/securemessage
     third_party/shell-encryption
     third_party/simplejson
@@ -485,6 +488,7 @@
     third_party/wayland
     third_party/web-animations-js
     third_party/webdriver
+    third_party/webgpu-cts
     third_party/webrtc
     third_party/webrtc/common_audio/third_party/ooura
     third_party/webrtc/common_audio/third_party/spl_sqrt_floor

++++++ chromium-91-GCC_fix_vector_types_in_pcscan.patch ++++++
From: Stephan Hartmann <sth...@googlemail.com>
Subject: GCC: fix vector types in pcscan
Date: Sat Apr 10 17:02:49 2021
References: 
https://chromium.googlesource.com/chromium/src/+/429e6f78a88473208e96689afa2f6e91f07a4f8c%5E!/#F0

Index: 
chromium-91.0.4472.57/base/allocator/partition_allocator/starscan/pcscan.cc
===================================================================
--- 
chromium-91.0.4472.57.orig/base/allocator/partition_allocator/starscan/pcscan.cc
+++ chromium-91.0.4472.57/base/allocator/partition_allocator/starscan/pcscan.cc
@@ -1143,7 +1143,7 @@ class PCScanTask::ScanLoop final {
       const __m128i maybe_ptrs =
           _mm_loadu_si128(reinterpret_cast<__m128i*>(payload));
       const __m128i vand = _mm_and_si128(maybe_ptrs, cage_mask);
-      const __m128d vcmp = _mm_cmpeq_epi64(vand, vbase);
+      const __m128i vcmp = _mm_cmpeq_epi64(vand, vbase);
       const int mask = _mm_movemask_pd(_mm_castsi128_pd(vcmp));
       if (LIKELY(!mask))
         continue;
@@ -1153,15 +1153,14 @@ class PCScanTask::ScanLoop final {
       if (mask & 0b01) {
         quarantine_size +=
             pcscan_task_.TryMarkObjectInNormalBuckets<GigaCageLookupPolicy>(
-                _mm_cvtsi128_si64(_mm_castpd_si128(maybe_ptrs)));
+                _mm_cvtsi128_si64(maybe_ptrs));
       }
       if (mask & 0b10) {
         // Extraction intrinsics for qwords are only supported in SSE4.1, so
         // instead we reshuffle dwords with pshufd. The mask is used to move 
the
         // 4th and 3rd dwords into the second and first position.
         static constexpr int kSecondWordMask = (3 << 2) | (2 << 0);
-        const __m128i shuffled =
-            _mm_shuffle_epi32(_mm_castpd_si128(maybe_ptrs), kSecondWordMask);
+       const __m128i shuffled = _mm_shuffle_epi32(maybe_ptrs, kSecondWordMask);
         quarantine_size +=
             pcscan_task_.TryMarkObjectInNormalBuckets<GigaCageLookupPolicy>(
                 _mm_cvtsi128_si64(shuffled));
++++++ chromium-91-java-only-allowed-in-android-builds.patch ++++++
References: https://bugs.chromium.org/p/chromium/issues/detail?id=1192875

Index: chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
===================================================================
--- chromium-91.0.4472.57.orig/third_party/closure_compiler/compiler.py
+++ chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
@@ -13,8 +13,7 @@ import subprocess
 
 
 _CURRENT_DIR = os.path.join(os.path.dirname(__file__))
-_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
-assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
+_JAVA_PATH = "java"
 
 class Compiler(object):
   """Runs the Closure compiler on given source files to typecheck them
++++++ chromium-91-system-icu.patch ++++++
>From a0ddb153bdaf0ef83c8bfec744fedb97bf4ccfd0 Mon Sep 17 00:00:00 2001
From: Stephan Hartmann <sth...@googlemail.com>
Date: Fri, 16 Apr 2021 14:09:29 +0000
Subject: [PATCH] [unbundle] Use char16_t as UCHAR_TYPE

Overriding UCHAR_TYPE was dropped with:
https://chromium-review.googlesource.com/c/chromium/deps/icu/+/2732628
---
 build/linux/unbundle/icu.gn | 19 +++++++------------
 1 file changed, 7 insertions(+), 12 deletions(-)

diff --git a/build/linux/unbundle/icu.gn b/build/linux/unbundle/icu.gn
index 0f52fc1..33a0121 100644
--- a/build/linux/unbundle/icu.gn
+++ b/build/linux/unbundle/icu.gn
@@ -16,7 +16,6 @@ config("icu_config") {
   defines = [
     "USING_SYSTEM_ICU=1",
     "ICU_UTIL_DATA_IMPL=ICU_UTIL_DATA_STATIC",
-    "UCHAR_TYPE=uint16_t",
 
     # U_EXPORT (defined in unicode/platform.h) is used to set public visibility
     # on classes through the U_COMMON_API and U_I18N_API macros (among others).
   ]
 }
 
-- 
2.26.3

++++++ chromium-90.0.4430.212.tar.xz -> chromium-91.0.4472.77.tar.xz ++++++
/work/SRC/openSUSE:Factory/chromium/chromium-90.0.4430.212.tar.xz 
/work/SRC/openSUSE:Factory/.chromium.new.1898/chromium-91.0.4472.77.tar.xz 
differ: char 26, line 1

++++++ chromium-master-prefs-path.patch ++++++
--- /var/tmp/diff_new_pack.AEdH5l/_old  2021-06-01 10:33:35.148417113 +0200
+++ /var/tmp/diff_new_pack.AEdH5l/_new  2021-06-01 10:33:35.152417119 +0200
@@ -1,14 +1,15 @@
-Index: 
chromium-86.0.4240.75/chrome/browser/first_run/first_run_internal_linux.cc
+Index: 
chromium-91.0.4472.57/chrome/browser/first_run/first_run_internal_linux.cc
 ===================================================================
---- 
chromium-86.0.4240.75.orig/chrome/browser/first_run/first_run_internal_linux.cc
-+++ chromium-86.0.4240.75/chrome/browser/first_run/first_run_internal_linux.cc
-@@ -20,8 +20,7 @@ bool IsOrganicFirstRun() {
+--- 
chromium-91.0.4472.57.orig/chrome/browser/first_run/first_run_internal_linux.cc
++++ chromium-91.0.4472.57/chrome/browser/first_run/first_run_internal_linux.cc
+@@ -21,9 +21,7 @@ bool IsOrganicFirstRun() {
  base::FilePath InitialPrefsPath() {
    // The standard location of the initial prefs is next to the chrome binary.
    base::FilePath initial_prefs;
 -  if (!base::PathService::Get(base::DIR_EXE, &initial_prefs))
 -    return base::FilePath();
+-
 +  initial_prefs = base::FilePath("/etc/chromium");
-   return initial_prefs.AppendASCII(installer::kLegacyInitialPrefs);
- }
- 
+   base::FilePath new_path = 
initial_prefs.AppendASCII(installer::kInitialPrefs);
+   if (base::PathIsReadable(new_path))
+     return new_path;

Reply via email to