Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ungoogled-chromium for openSUSE:Factory checked in at 2023-08-30 10:20:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ungoogled-chromium (Old) and /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ungoogled-chromium" Wed Aug 30 10:20:06 2023 rev:10 rq:1107812 version:116.0.5845.110 Changes: -------- --- /work/SRC/openSUSE:Factory/ungoogled-chromium/ungoogled-chromium.changes 2023-08-17 19:43:31.182786482 +0200 +++ /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/ungoogled-chromium.changes 2023-08-30 10:23:04.093683892 +0200 @@ -1,0 +2,10 @@ +Mon Aug 28 18:05:54 UTC 2023 - MichaÅ Szczepaniak <m.szczepaniak....@gmail.com> + +- ungoogled-chromium 116.0.5845.110 (boo#1214487): + * CVE-2023-4427: Out of bounds memory access in V8 + * CVE-2023-4428: Out of bounds memory access in CSS + * CVE-2023-4429: Use after free in Loader + * CVE-2023-4430: Use after free in Vulkan + * CVE-2023-4431: Out of bounds memory access in Fonts + +------------------------------------------------------------------- Old: ---- chromium-116.0.5845.96.tar.xz ungoogled-chromium-116.0.5845.96-1.tar.gz New: ---- chromium-116.0.5845.110.tar.xz ungoogled-chromium-116.0.5845.110-1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ungoogled-chromium.spec ++++++ --- /var/tmp/diff_new_pack.3fsKCM/_old 2023-08-30 10:23:15.486090533 +0200 +++ /var/tmp/diff_new_pack.3fsKCM/_new 2023-08-30 10:23:15.490090675 +0200 @@ -1,5 +1,5 @@ # -# spec file +# spec file for package ungoogled-chromium # # Copyright (c) 2023 SUSE LLC # Copyright (c) 2023 Callum Farmer <gm...@opensuse.org> @@ -58,7 +58,6 @@ %else %bcond_without system_re2 %endif -%bcond_with is_beta # CHANNEL SWITCH %bcond_with system_avif # Compiler %bcond_without clang @@ -75,15 +74,8 @@ %define ffmpeg_version 58 %endif # Package names -%if %{with is_beta} -%define chromedriver_name %{name}-chromedriver -%define n_suffix -beta -%else -%define chromedriver_name chromedriver -%define n_suffix %{nil} -%endif -Name: ungoogled-chromium%{n_suffix} -Version: 116.0.5845.96 +Name: ungoogled-chromium +Version: 116.0.5845.110 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later @@ -359,14 +351,13 @@ %description Chromium is the open-source project behind Google Chrome. We invite you to join us in our effort to help build a safer, faster, and more stable way for all Internet users to experience the web, and to create a powerful platform for developing a new generation of web applications. -%package %{chromedriver_name} +%package chromedriver Summary: WebDriver for Google Chrome/Chromium License: BSD-3-Clause Requires: %{name} = %{version} -Provides: chromedriver = %{version}-%{release} Conflicts: chromedriver -%description %{chromedriver_name} +%description chromedriver WebDriver is an open source tool for automated testing of webapps across many browsers. It provides capabilities for navigating to web pages, user input, JavaScript execution, and more. ChromeDriver is a standalone server which implements WebDriver's wire protocol for Chromium. It is being developed by members of the Chromium and WebDriver teams. %prep @@ -964,7 +955,7 @@ %{_bindir}/chromium %{_mandir}/man1/chromium-browser.1%{?ext_man} -%files %{chromedriver_name} +%files chromedriver %license LICENSE %{_libdir}/chromium/chromedriver %{_bindir}/chromedriver ++++++ chromium-116.0.5845.96.tar.xz -> chromium-116.0.5845.110.tar.xz ++++++ /work/SRC/openSUSE:Factory/ungoogled-chromium/chromium-116.0.5845.96.tar.xz /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/chromium-116.0.5845.110.tar.xz differ: char 15, line 1 ++++++ ungoogled-chromium-116.0.5845.96-1.tar.gz -> ungoogled-chromium-116.0.5845.110-1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/chromium_version.txt new/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt --- old/ungoogled-chromium-116.0.5845.96-1/chromium_version.txt 2023-08-16 10:22:49.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt 2023-08-23 20:15:05.000000000 +0200 @@ -1 +1 @@ -116.0.5845.96 +116.0.5845.110 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/domain_substitution.list new/ungoogled-chromium-116.0.5845.110-1/domain_substitution.list --- old/ungoogled-chromium-116.0.5845.96-1/domain_substitution.list 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/domain_substitution.list 2023-08-23 20:15:05.000000000 +0200 @@ -13545,6 +13545,7 @@ tools/gn/src/base/values.h tools/gn/src/base/win/registry.cc tools/gn/src/base/win/registry.h +tools/gn/src/gn/args.cc tools/gn/src/gn/command_gen.cc tools/gn/src/gn/compile_commands_writer.h tools/gn/src/gn/standard_out.cc diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch new/ungoogled-chromium-116.0.5845.110-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch --- old/ungoogled-chromium-116.0.5845.96-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/patches/core/inox-patchset/0001-fix-building-without-safebrowsing.patch 2023-08-23 20:15:05.000000000 +0200 @@ -764,7 +764,7 @@ if (safe_browsing_mode != 0) { # "Safe Browsing Basic" files used for safe browsing in full mode -@@ -515,6 +517,7 @@ static_library("advanced_protection") { +@@ -516,6 +518,7 @@ static_library("advanced_protection") { } source_set("metrics_collector") { @@ -772,7 +772,7 @@ sources = [ "safe_browsing_metrics_collector_factory.cc", "safe_browsing_metrics_collector_factory.h", -@@ -534,6 +537,7 @@ source_set("metrics_collector") { +@@ -535,6 +538,7 @@ source_set("metrics_collector") { "//components/safe_browsing/core/common:safe_browsing_prefs", "//content/public/browser", ] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch --- old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/disable-web-environment-integrity.patch 2023-08-23 20:15:05.000000000 +0200 @@ -153,7 +153,7 @@ "//third_party/blink/renderer/modules/eyedropper", --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5 -@@ -3918,12 +3918,6 @@ +@@ -3920,12 +3920,6 @@ base_feature: "none", }, { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch --- old/ungoogled-chromium-116.0.5845.96-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-08-23 20:15:05.000000000 +0200 @@ -3972,24 +3972,27 @@ --- a/components/safe_browsing/core/browser/db/v4_local_database_manager.cc +++ b/components/safe_browsing/core/browser/db/v4_local_database_manager.cc -@@ -346,10 +346,9 @@ const V4LocalDatabaseManager* +@@ -346,12 +346,9 @@ const V4LocalDatabaseManager* scoped_refptr<V4LocalDatabaseManager> V4LocalDatabaseManager::Create( const base::FilePath& base_path, scoped_refptr<base::SequencedTaskRunner> ui_task_runner, - scoped_refptr<base::SequencedTaskRunner> io_task_runner, -- ExtendedReportingLevelCallback extended_reporting_level_callback) { +- ExtendedReportingLevelCallback extended_reporting_level_callback, +- RecordMigrationMetricsCallback record_migration_metrics_callback) { + scoped_refptr<base::SequencedTaskRunner> io_task_runner) { return base::WrapRefCounted(new V4LocalDatabaseManager( -- base_path, extended_reporting_level_callback, std::move(ui_task_runner), +- base_path, extended_reporting_level_callback, +- std::move(record_migration_metrics_callback), std::move(ui_task_runner), + base_path, std::move(ui_task_runner), std::move(io_task_runner), nullptr)); } -@@ -372,14 +371,12 @@ void V4LocalDatabaseManager::CollectData +@@ -374,17 +371,12 @@ void V4LocalDatabaseManager::CollectData V4LocalDatabaseManager::V4LocalDatabaseManager( const base::FilePath& base_path, - ExtendedReportingLevelCallback extended_reporting_level_callback, +- RecordMigrationMetricsCallback record_migration_metrics_callback, scoped_refptr<base::SequencedTaskRunner> ui_task_runner, scoped_refptr<base::SequencedTaskRunner> io_task_runner, scoped_refptr<base::SequencedTaskRunner> task_runner_for_tests) @@ -3997,10 +4000,25 @@ std::move(io_task_runner)), base_path_(base_path), - extended_reporting_level_callback_(extended_reporting_level_callback), +- record_migration_metrics_callback_( +- std::move(record_migration_metrics_callback)), list_infos_(GetListInfos()), task_runner_(task_runner_for_tests ? task_runner_for_tests -@@ -1277,8 +1274,7 @@ void V4LocalDatabaseManager::SetupUpdate +@@ -709,12 +701,6 @@ void V4LocalDatabaseManager::DatabaseRea + v4_database_ = std::move(v4_database); + + v4_database_->RecordFileSizeHistograms(); +- if (record_migration_metrics_callback_) { +- ui_task_runner()->PostTask( +- FROM_HERE, +- base::BindOnce(std::move(record_migration_metrics_callback_), +- v4_database_->GetMigrateResult())); +- } + + PopulateArtificialDatabase(); + +@@ -1288,8 +1274,7 @@ void V4LocalDatabaseManager::SetupUpdate weak_factory_.GetWeakPtr()); v4_update_protocol_manager_ = V4UpdateProtocolManager::Create( @@ -4012,25 +4030,27 @@ void V4LocalDatabaseManager::UpdateRequestCompleted( --- a/components/safe_browsing/core/browser/db/v4_local_database_manager.h +++ b/components/safe_browsing/core/browser/db/v4_local_database_manager.h -@@ -39,8 +39,7 @@ class V4LocalDatabaseManager : public Sa +@@ -42,9 +42,7 @@ class V4LocalDatabaseManager : public Sa static scoped_refptr<V4LocalDatabaseManager> Create( const base::FilePath& base_path, scoped_refptr<base::SequencedTaskRunner> ui_task_runner, - scoped_refptr<base::SequencedTaskRunner> io_task_runner, -- ExtendedReportingLevelCallback extended_reporting_level_callback); +- ExtendedReportingLevelCallback extended_reporting_level_callback, +- RecordMigrationMetricsCallback record_migration_metrics_callback); + scoped_refptr<base::SequencedTaskRunner> io_task_runner); V4LocalDatabaseManager(const V4LocalDatabaseManager&) = delete; V4LocalDatabaseManager& operator=(const V4LocalDatabaseManager&) = delete; -@@ -112,7 +111,6 @@ class V4LocalDatabaseManager : public Sa +@@ -116,8 +114,6 @@ class V4LocalDatabaseManager : public Sa // Must be initialized by calling StartOnSBThread() before using. V4LocalDatabaseManager( const base::FilePath& base_path, - ExtendedReportingLevelCallback extended_reporting_level_callback, +- RecordMigrationMetricsCallback record_migration_metrics_callback, scoped_refptr<base::SequencedTaskRunner> ui_task_runner, scoped_refptr<base::SequencedTaskRunner> io_task_runner, scoped_refptr<base::SequencedTaskRunner> task_runner_for_tests); -@@ -430,10 +428,6 @@ class V4LocalDatabaseManager : public Sa +@@ -435,13 +431,6 @@ class V4LocalDatabaseManager : public Sa // ready to process next update. DatabaseUpdatedCallback db_updated_callback_; @@ -4038,6 +4058,9 @@ - // manager. - ExtendedReportingLevelCallback extended_reporting_level_callback_; - +- // Callback to record metrics on database migration after initialization. +- RecordMigrationMetricsCallback record_migration_metrics_callback_; +- // The client_state of each list currently being synced. This is updated each // time a database update completes, and used to send list client_state // information in the full hash request. @@ -5976,7 +5999,7 @@ #if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS) --- a/tools/metrics/histograms/enums.xml +++ b/tools/metrics/histograms/enums.xml -@@ -106134,7 +106134,6 @@ Full version information for the fingerp +@@ -106139,7 +106139,6 @@ Full version information for the fingerp <int value="3" label="kRestoreOnStartup"/> <int value="4" label="kURLsToRestoreOnStartup"/> <int value="5" label="extensions::pref_names::kExtensions"/> @@ -5984,7 +6007,7 @@ <int value="7" label="kSearchProviderOverrides"/> <int value="8" label="kDefaultSearchProviderSearchURL (Obsolete 12/2016)"/> <int value="9" label="kDefaultSearchProviderKeyword (Obsolete 12/2016)"/> -@@ -106149,10 +106148,7 @@ Full version information for the fingerp +@@ -106154,10 +106153,7 @@ Full version information for the fingerp <int value="18" label="kSafeBrowsingIncidentsSent"/> <int value="19" label="kSwReporterPromptVersion"/> <int value="20" label="kSwReporterPromptReason"/> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch --- old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/fingerprinting-flags-client-rects-and-measuretext.patch 2023-08-23 20:15:05.000000000 +0200 @@ -311,7 +311,7 @@ } // namespace blink --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5 -@@ -1787,6 +1787,12 @@ +@@ -1789,6 +1789,12 @@ origin_trial_feature_name: "Focusgroup", }, { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch --- old/ungoogled-chromium-116.0.5845.96-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch 2023-08-10 05:38:32.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch 2023-08-23 20:15:05.000000000 +0200 @@ -322,7 +322,7 @@ // Methods overridden by all sub-classes --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5 -@@ -1793,6 +1793,9 @@ +@@ -1795,6 +1795,9 @@ name: "FingerprintingCanvasMeasureTextNoise", }, {