Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ungoogled-chromium for openSUSE:Factory checked in at 2023-09-12 21:04:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ungoogled-chromium (Old) and /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ungoogled-chromium" Tue Sep 12 21:04:04 2023 rev:11 rq:1110604 version:116.0.5845.179 Changes: -------- --- /work/SRC/openSUSE:Factory/ungoogled-chromium/ungoogled-chromium.changes 2023-08-30 10:23:04.093683892 +0200 +++ /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/ungoogled-chromium.changes 2023-09-12 21:05:41.674191991 +0200 @@ -1,0 +2,10 @@ +Tue Sep 12 08:41:52 UTC 2023 - MichaÅ Szczepaniak <m.szczepaniak....@gmail.com> + +- ungoogled-chromium 116.0.5845.179 (boo#1215023): + * CVE-2023-4761: Out of bounds memory access in FedCM + * CVE-2023-4762: Type Confusion in V8 + * CVE-2023-4763: Use after free in Networks + * CVE-2023-4764: Incorrect security UI in BFCache + * CVE-2023-4572: Use after free in MediaStream + +------------------------------------------------------------------- Old: ---- chromium-116.0.5845.110.tar.xz ungoogled-chromium-116.0.5845.110-1.tar.gz New: ---- chromium-116.0.5845.179.tar.xz ungoogled-chromium-116.0.5845.179-1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ungoogled-chromium.spec ++++++ --- /var/tmp/diff_new_pack.JWNoms/_old 2023-09-12 21:05:53.774623607 +0200 +++ /var/tmp/diff_new_pack.JWNoms/_new 2023-09-12 21:05:53.774623607 +0200 @@ -75,7 +75,7 @@ %endif # Package names Name: ungoogled-chromium -Version: 116.0.5845.110 +Version: 116.0.5845.179 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later ++++++ chromium-116.0.5845.110.tar.xz -> chromium-116.0.5845.179.tar.xz ++++++ /work/SRC/openSUSE:Factory/ungoogled-chromium/chromium-116.0.5845.110.tar.xz /work/SRC/openSUSE:Factory/.ungoogled-chromium.new.1766/chromium-116.0.5845.179.tar.xz differ: char 15, line 1 ++++++ ungoogled-chromium-116.0.5845.110-1.tar.gz -> ungoogled-chromium-116.0.5845.179-1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/.cirrus.yml new/ungoogled-chromium-116.0.5845.179-1/.cirrus.yml --- old/ungoogled-chromium-116.0.5845.110-1/.cirrus.yml 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/.cirrus.yml 2023-09-06 00:43:46.000000000 +0200 @@ -1,5 +1,11 @@ +env: + CIRRUS_CLONE_DEPTH: 1 + container: dockerfile: .cirrus_Dockerfile + cpu: 5 + memory: 20G + use_in_memory_disk: true code_check_task: pip_cache: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt new/ungoogled-chromium-116.0.5845.179-1/chromium_version.txt --- old/ungoogled-chromium-116.0.5845.110-1/chromium_version.txt 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/chromium_version.txt 2023-09-06 00:43:46.000000000 +0200 @@ -1 +1 @@ -116.0.5845.110 +116.0.5845.179 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/flags.gn new/ungoogled-chromium-116.0.5845.179-1/flags.gn --- old/ungoogled-chromium-116.0.5845.110-1/flags.gn 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/flags.gn 2023-09-06 00:43:46.000000000 +0200 @@ -4,7 +4,6 @@ disable_fieldtrial_testing_config=true enable_hangout_services_extension=false enable_mdns=false -enable_mse_mpeg2ts_stream_parser=true enable_nacl=false enable_reading_list=false enable_remoting=false diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/fix-building-with-prunned-binaries.patch new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/fix-building-with-prunned-binaries.patch --- old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/fix-building-with-prunned-binaries.patch 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/fix-building-with-prunned-binaries.patch 2023-09-06 00:43:46.000000000 +0200 @@ -23,6 +23,26 @@ # Linux executable("chromedriver_server.unstripped") { testonly = true +--- a/chrome/test/variations/BUILD.gn ++++ b/chrome/test/variations/BUILD.gn +@@ -49,6 +49,5 @@ python_library("variations_desktop_smoke + ":test_utils", + "//testing:run_isolated_script_test", + "//testing:test_scripts_shared", +- "//third_party/catapult/third_party/gsutil:gsutil", + ] + } +--- a/components/update_client/BUILD.gn ++++ b/components/update_client/BUILD.gn +@@ -308,8 +308,6 @@ source_set("unit_tests") { + "//third_party/puffin:libpuffpatch", + "//third_party/re2", + ] +- +- data_deps = [ "//components/test/data/update_client/puffin_patch_test:puffin_patch_test_files" ] + } + + fuzzer_test("update_client_protocol_serializer_fuzzer") { --- a/content/shell/BUILD.gn +++ b/content/shell/BUILD.gn @@ -728,10 +728,6 @@ if (is_apple) { @@ -46,3 +66,13 @@ ] group("devtools_all_files") { +--- a/third_party/puffin/BUILD.gn ++++ b/third_party/puffin/BUILD.gn +@@ -115,7 +115,6 @@ executable("puffin_unittest") { + "src/unittest_common.cc", + "src/utils_unittest.cc", + ] +- data_deps = [ "//components/test/data/update_client/puffin_patch_test:puffin_patch_test_files" ] + deps = [ + ":libpuffdiff", + ":libpuffpatch", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch --- old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/fix-building-without-safebrowsing.patch 2023-09-06 00:43:46.000000000 +0200 @@ -2278,7 +2278,7 @@ "//components/safe_browsing/content/browser:safe_browsing_service", "//components/safe_browsing/content/browser/password_protection", "//components/safe_browsing/content/browser/password_protection:test_support", -@@ -6367,7 +6366,6 @@ test("unit_tests") { +@@ -6368,7 +6367,6 @@ test("unit_tests") { "//components/resources", "//components/safe_browsing:buildflags", "//components/safe_browsing/content/browser", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch --- old/ungoogled-chromium-116.0.5845.110-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/patches/core/ungoogled-chromium/remove-unused-preferences-fields.patch 2023-09-06 00:43:46.000000000 +0200 @@ -5999,7 +5999,7 @@ #if !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_IOS) --- a/tools/metrics/histograms/enums.xml +++ b/tools/metrics/histograms/enums.xml -@@ -106139,7 +106139,6 @@ Full version information for the fingerp +@@ -106141,7 +106141,6 @@ Full version information for the fingerp <int value="3" label="kRestoreOnStartup"/> <int value="4" label="kURLsToRestoreOnStartup"/> <int value="5" label="extensions::pref_names::kExtensions"/> @@ -6007,7 +6007,7 @@ <int value="7" label="kSearchProviderOverrides"/> <int value="8" label="kDefaultSearchProviderSearchURL (Obsolete 12/2016)"/> <int value="9" label="kDefaultSearchProviderKeyword (Obsolete 12/2016)"/> -@@ -106154,10 +106153,7 @@ Full version information for the fingerp +@@ -106156,10 +106155,7 @@ Full version information for the fingerp <int value="18" label="kSafeBrowsingIncidentsSent"/> <int value="19" label="kSwReporterPromptVersion"/> <int value="20" label="kSwReporterPromptReason"/> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch new/ungoogled-chromium-116.0.5845.179-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch --- old/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/patches/extra/bromite/flag-fingerprinting-canvas-image-data-noise.patch 2023-09-06 00:43:46.000000000 +0200 @@ -73,7 +73,7 @@ #include "third_party/blink/renderer/platform/graphics/stroke_data.h" #include "third_party/blink/renderer/platform/graphics/video_frame_image_util.h" #include "third_party/blink/renderer/platform/heap/garbage_collected.h" -@@ -2184,6 +2185,9 @@ ImageData* BaseRenderingContext2D::getIm +@@ -2183,6 +2184,9 @@ ImageData* BaseRenderingContext2D::getIm snapshot->PaintImageForCurrentFrame().GetSkImageInfo().bounds(); DCHECK(!bounds.intersect(SkIRect::MakeXYWH(sx, sy, sw, sh))); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-max-connections-per-host.patch new/ungoogled-chromium-116.0.5845.179-1/patches/extra/bromite/flag-max-connections-per-host.patch --- old/ungoogled-chromium-116.0.5845.110-1/patches/extra/bromite/flag-max-connections-per-host.patch 2023-08-23 20:15:05.000000000 +0200 +++ new/ungoogled-chromium-116.0.5845.179-1/patches/extra/bromite/flag-max-connections-per-host.patch 2023-09-06 00:43:46.000000000 +0200 @@ -100,7 +100,7 @@ --- a/chrome/browser/flag_descriptions.cc +++ b/chrome/browser/flag_descriptions.cc -@@ -2107,6 +2107,10 @@ const char kUnthrottledNestedTimeoutDesc +@@ -2110,6 +2110,10 @@ const char kUnthrottledNestedTimeoutDesc "websites abusing the API will still eventually have their setTimeouts " "clamped."; @@ -113,7 +113,7 @@ const char kMediaRouterCastAllowAllIPsDescription[] = --- a/chrome/browser/flag_descriptions.h +++ b/chrome/browser/flag_descriptions.h -@@ -1179,6 +1179,9 @@ extern const char kLogJsConsoleMessagesD +@@ -1182,6 +1182,9 @@ extern const char kLogJsConsoleMessagesD extern const char kUnthrottledNestedTimeoutName[]; extern const char kUnthrottledNestedTimeoutDescription[];