Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package ungoogled-chromium for 
openSUSE:Factory checked in at 2023-08-30 10:20:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ungoogled-chromium (Old)
 and      /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "ungoogled-chromium"

Wed Aug 30 10:20:06 2023 rev:10 rq:1107812 version:116.0.5845.110

Changes:
--------
--- /work/SRC/openSUSE:Factory/ungoogled-chromium/ungoogled-chromium.changes    
2023-08-17 19:43:31.182786482 +0200
+++ 
/work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/ungoogled-chromium.changes
  2023-08-30 10:23:04.093683892 +0200
@@ -1,0 +2,10 @@
+Mon Aug 28 18:05:54 UTC 2023 - Michał Szczepaniak 
<m.szczepaniak....@gmail.com>
+
+- ungoogled-chromium 116.0.5845.110 (boo#1214487):
+  * CVE-2023-4427: Out of bounds memory access in V8
+  * CVE-2023-4428: Out of bounds memory access in CSS
+  * CVE-2023-4429: Use after free in Loader
+  * CVE-2023-4430: Use after free in Vulkan
+  * CVE-2023-4431: Out of bounds memory access in Fonts
+
+-------------------------------------------------------------------

Old:
----
  chromium-116.0.5845.96.tar.xz
  ungoogled-chromium-116.0.5845.96-1.tar.gz

New:
----
  chromium-116.0.5845.110.tar.xz
  ungoogled-chromium-116.0.5845.110-1.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ ungoogled-chromium.spec ++++++
--- /var/tmp/diff_new_pack.3fsKCM/_old  2023-08-30 10:23:15.486090533 +0200
+++ /var/tmp/diff_new_pack.3fsKCM/_new  2023-08-30 10:23:15.490090675 +0200
@@ -1,5 +1,5 @@
 #
-# spec file
+# spec file for package ungoogled-chromium
 #
 # Copyright (c) 2023 SUSE LLC
 # Copyright (c) 2023 Callum Farmer <gm...@opensuse.org>
@@ -58,7 +58,6 @@
 %else
 %bcond_without system_re2
 %endif
-%bcond_with is_beta # CHANNEL SWITCH
 %bcond_with system_avif
 # Compiler
 %bcond_without clang
@@ -75,15 +74,8 @@
 %define ffmpeg_version 58
 %endif
 # Package names
-%if %{with is_beta}
-%define chromedriver_name %{name}-chromedriver
-%define n_suffix -beta
-%else
-%define chromedriver_name chromedriver
-%define n_suffix %{nil}
-%endif
-Name:           ungoogled-chromium%{n_suffix}
-Version:        116.0.5845.96
+Name:           ungoogled-chromium
+Version:        116.0.5845.110
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
@@ -359,14 +351,13 @@
 %description
 Chromium is the open-source project behind Google Chrome. We invite you to 
join us in our effort to help build a safer, faster, and more stable way for 
all Internet users to experience the web, and to create a powerful platform for 
developing a new generation of web applications.
 
-%package %{chromedriver_name}
+%package chromedriver
 Summary:        WebDriver for Google Chrome/Chromium
 License:        BSD-3-Clause
 Requires:       %{name} = %{version}
-Provides:       chromedriver = %{version}-%{release}
 Conflicts:      chromedriver
 
-%description %{chromedriver_name}
+%description chromedriver
 WebDriver is an open source tool for automated testing of webapps across many 
browsers. It provides capabilities for navigating to web pages, user input, 
JavaScript execution, and more. ChromeDriver is a standalone server which 
implements WebDriver's wire protocol for Chromium. It is being developed by 
members of the Chromium and WebDriver teams.
 
 %prep
@@ -964,7 +955,7 @@
 %{_bindir}/chromium
 %{_mandir}/man1/chromium-browser.1%{?ext_man}
 
-%files %{chromedriver_name}
+%files chromedriver
 %license LICENSE
 %{_libdir}/chromium/chromedriver
 %{_bindir}/chromedriver

++++++ chromium-116.0.5845.96.tar.xz -> chromium-116.0.5845.110.tar.xz ++++++
/work/SRC/openSUSE:Factory/ungoogled-chromium/chromium-116.0.5845.96.tar.xz 
/work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/chromium-116.0.5845.110.tar.xz
 differ: char 15, line 1


++++++ ungoogled-chromium-116.0.5845.96-1.tar.gz -> 
ungoogled-chromium-116.0.5845.110-1.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/chromium_version.txt 
new/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt
--- old/ungoogled-chromium-116.0.5845.96-1/chromium_version.txt 2023-08-16 
10:22:49.000000000 +0200
+++ new/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt        
2023-08-23 20:15:05.000000000 +0200
@@ -1 +1 @@
-116.0.5845.96
+116.0.5845.110
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/domain_substitution.list 
new/ungoogled-chromium-116.0.5845.110-1/domain_substitution.list
--- old/ungoogled-chromium-116.0.5845.96-1/domain_substitution.list     
2023-08-10 05:38:32.000000000 +0200
+++ new/ungoogled-chromium-116.0.5845.110-1/domain_substitution.list    
2023-08-23 20:15:05.000000000 +0200
@@ -13545,6 +13545,7 @@
 tools/gn/src/base/values.h
 tools/gn/src/base/win/registry.cc
 tools/gn/src/base/win/registry.h
+tools/gn/src/gn/args.cc
 tools/gn/src/gn/command_gen.cc
 tools/gn/src/gn/compile_commands_writer.h
 tools/gn/src/gn/standard_out.cc
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch
 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch
--- 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch
      2023-08-10 05:38:32.000000000 +0200
+++ 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch
     2023-08-23 20:15:05.000000000 +0200
@@ -764,7 +764,7 @@
  
    if (safe_browsing_mode != 0) {
      # "Safe Browsing Basic" files used for safe browsing in full mode
-@@ -515,6 +517,7 @@ static_library("advanced_protection") {
+@@ -516,6 +518,7 @@ static_library("advanced_protection") {
  }
  
  source_set("metrics_collector") {
@@ -772,7 +772,7 @@
    sources = [
      "safe_browsing_metrics_collector_factory.cc",
      "safe_browsing_metrics_collector_factory.h",
-@@ -534,6 +537,7 @@ source_set("metrics_collector") {
+@@ -535,6 +538,7 @@ source_set("metrics_collector") {
      "//components/safe_browsing/core/common:safe_browsing_prefs",
      "//content/public/browser",
    ]
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch
 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch
--- 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch
      2023-08-10 05:38:32.000000000 +0200
+++ 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch
     2023-08-23 20:15:05.000000000 +0200
@@ -153,7 +153,7 @@
      "//third_party/blink/renderer/modules/eyedropper",
 --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5
 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5
-@@ -3918,12 +3918,6 @@
+@@ -3920,12 +3920,6 @@
        base_feature: "none",
      },
      {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch
 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch
--- 
old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch
       2023-08-10 05:38:32.000000000 +0200
+++ 
new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch
      2023-08-23 20:15:05.000000000 +0200
@@ -3972,24 +3972,27 @@
  
 --- a/components/safe_browsing/core/browser/db/v4_local_database_manager.cc
 +++ b/components/safe_browsing/core/browser/db/v4_local_database_manager.cc
-@@ -346,10 +346,9 @@ const V4LocalDatabaseManager*
+@@ -346,12 +346,9 @@ const V4LocalDatabaseManager*
  scoped_refptr<V4LocalDatabaseManager> V4LocalDatabaseManager::Create(
      const base::FilePath& base_path,
      scoped_refptr<base::SequencedTaskRunner> ui_task_runner,
 -    scoped_refptr<base::SequencedTaskRunner> io_task_runner,
--    ExtendedReportingLevelCallback extended_reporting_level_callback) {
+-    ExtendedReportingLevelCallback extended_reporting_level_callback,
+-    RecordMigrationMetricsCallback record_migration_metrics_callback) {
 +    scoped_refptr<base::SequencedTaskRunner> io_task_runner) {
    return base::WrapRefCounted(new V4LocalDatabaseManager(
--      base_path, extended_reporting_level_callback, std::move(ui_task_runner),
+-      base_path, extended_reporting_level_callback,
+-      std::move(record_migration_metrics_callback), std::move(ui_task_runner),
 +      base_path, std::move(ui_task_runner),
        std::move(io_task_runner), nullptr));
  }
  
-@@ -372,14 +371,12 @@ void V4LocalDatabaseManager::CollectData
+@@ -374,17 +371,12 @@ void V4LocalDatabaseManager::CollectData
  
  V4LocalDatabaseManager::V4LocalDatabaseManager(
      const base::FilePath& base_path,
 -    ExtendedReportingLevelCallback extended_reporting_level_callback,
+-    RecordMigrationMetricsCallback record_migration_metrics_callback,
      scoped_refptr<base::SequencedTaskRunner> ui_task_runner,
      scoped_refptr<base::SequencedTaskRunner> io_task_runner,
      scoped_refptr<base::SequencedTaskRunner> task_runner_for_tests)
@@ -3997,10 +4000,25 @@
                                    std::move(io_task_runner)),
        base_path_(base_path),
 -      extended_reporting_level_callback_(extended_reporting_level_callback),
+-      record_migration_metrics_callback_(
+-          std::move(record_migration_metrics_callback)),
        list_infos_(GetListInfos()),
        task_runner_(task_runner_for_tests
                         ? task_runner_for_tests
-@@ -1277,8 +1274,7 @@ void V4LocalDatabaseManager::SetupUpdate
+@@ -709,12 +701,6 @@ void V4LocalDatabaseManager::DatabaseRea
+     v4_database_ = std::move(v4_database);
+ 
+     v4_database_->RecordFileSizeHistograms();
+-    if (record_migration_metrics_callback_) {
+-      ui_task_runner()->PostTask(
+-          FROM_HERE,
+-          base::BindOnce(std::move(record_migration_metrics_callback_),
+-                         v4_database_->GetMigrateResult()));
+-    }
+ 
+     PopulateArtificialDatabase();
+ 
+@@ -1288,8 +1274,7 @@ void V4LocalDatabaseManager::SetupUpdate
                            weak_factory_.GetWeakPtr());
  
    v4_update_protocol_manager_ = V4UpdateProtocolManager::Create(
@@ -4012,25 +4030,27 @@
  void V4LocalDatabaseManager::UpdateRequestCompleted(
 --- a/components/safe_browsing/core/browser/db/v4_local_database_manager.h
 +++ b/components/safe_browsing/core/browser/db/v4_local_database_manager.h
-@@ -39,8 +39,7 @@ class V4LocalDatabaseManager : public Sa
+@@ -42,9 +42,7 @@ class V4LocalDatabaseManager : public Sa
    static scoped_refptr<V4LocalDatabaseManager> Create(
        const base::FilePath& base_path,
        scoped_refptr<base::SequencedTaskRunner> ui_task_runner,
 -      scoped_refptr<base::SequencedTaskRunner> io_task_runner,
--      ExtendedReportingLevelCallback extended_reporting_level_callback);
+-      ExtendedReportingLevelCallback extended_reporting_level_callback,
+-      RecordMigrationMetricsCallback record_migration_metrics_callback);
 +      scoped_refptr<base::SequencedTaskRunner> io_task_runner);
  
    V4LocalDatabaseManager(const V4LocalDatabaseManager&) = delete;
    V4LocalDatabaseManager& operator=(const V4LocalDatabaseManager&) = delete;
-@@ -112,7 +111,6 @@ class V4LocalDatabaseManager : public Sa
+@@ -116,8 +114,6 @@ class V4LocalDatabaseManager : public Sa
    // Must be initialized by calling StartOnSBThread() before using.
    V4LocalDatabaseManager(
        const base::FilePath& base_path,
 -      ExtendedReportingLevelCallback extended_reporting_level_callback,
+-      RecordMigrationMetricsCallback record_migration_metrics_callback,
        scoped_refptr<base::SequencedTaskRunner> ui_task_runner,
        scoped_refptr<base::SequencedTaskRunner> io_task_runner,
        scoped_refptr<base::SequencedTaskRunner> task_runner_for_tests);
-@@ -430,10 +428,6 @@ class V4LocalDatabaseManager : public Sa
+@@ -435,13 +431,6 @@ class V4LocalDatabaseManager : public Sa
    // ready to process next update.
    DatabaseUpdatedCallback db_updated_callback_;
  
@@ -4038,6 +4058,9 @@
 -  // manager.
 -  ExtendedReportingLevelCallback extended_reporting_level_callback_;
 -
+-  // Callback to record metrics on database migration after initialization.
+-  RecordMigrationMetricsCallback record_migration_metrics_callback_;
+-
    // The client_state of each list currently being synced. This is updated 
each
    // time a database update completes, and used to send list client_state
    // information in the full hash request.
@@ -5976,7 +5999,7 @@
  #if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS)
 --- a/tools/metrics/histograms/enums.xml
 +++ b/tools/metrics/histograms/enums.xml
-@@ -106134,7 +106134,6 @@ Full version information for the fingerp
+@@ -106139,7 +106139,6 @@ Full version information for the fingerp
    <int value="3" label="kRestoreOnStartup"/>
    <int value="4" label="kURLsToRestoreOnStartup"/>
    <int value="5" label="extensions::pref_names::kExtensions"/>
@@ -5984,7 +6007,7 @@
    <int value="7" label="kSearchProviderOverrides"/>
    <int value="8" label="kDefaultSearchProviderSearchURL (Obsolete 12/2016)"/>
    <int value="9" label="kDefaultSearchProviderKeyword (Obsolete 12/2016)"/>
-@@ -106149,10 +106148,7 @@ Full version information for the fingerp
+@@ -106154,10 +106153,7 @@ Full version information for the fingerp
    <int value="18" label="kSafeBrowsingIncidentsSent"/>
    <int value="19" label="kSwReporterPromptVersion"/>
    <int value="20" label="kSwReporterPromptReason"/>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch
 
new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch
--- 
old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch
        2023-08-10 05:38:32.000000000 +0200
+++ 
new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch
       2023-08-23 20:15:05.000000000 +0200
@@ -311,7 +311,7 @@
  }  // namespace blink
 --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5
 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5
-@@ -1787,6 +1787,12 @@
+@@ -1789,6 +1789,12 @@
        origin_trial_feature_name: "Focusgroup",
      },
      {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch
 
new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch
--- 
old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch
      2023-08-10 05:38:32.000000000 +0200
+++ 
new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch
     2023-08-23 20:15:05.000000000 +0200
@@ -322,7 +322,7 @@
    // Methods overridden by all sub-classes
 --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5
 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5
-@@ -1793,6 +1793,9 @@
+@@ -1795,6 +1795,9 @@
        name: "FingerprintingCanvasMeasureTextNoise",
      },
      {

Reply via email to