rpms
/
chromium
21
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

import chromium-129.0.6668.70-1.el9

Browse Source
i9ce changed/i9ce/chromium-129.0.6668.70-1.el9
MSVSphere Packaging Team 3 months ago
parent 57a70c54e9
commit 072983bfa7
Signed by: sys_gitsync
GPG Key ID: B2B0B9F29E528FE8
6 changed files with 1103 additions and 1782 deletions
Show Stats Download Patch File Download Diff File

2
.chromium.metadata
Unescape View File

@ -1,3 +1,3 @@
7806b006b3cc1fe919ec61a2aae5602e42da66c5 SOURCES/chromium-129.0.6668.58-clean.tar.xz
b0b4c63dab16d273a6a9485b1e002390521e6a82 SOURCES/chromium-129.0.6668.70-clean.tar.xz
7e5d2c7864c5c83ec789b59c77cd9c20d2594916 SOURCES/linux-arm64-0.19.2.tgz
dea187019741602d57aaf189a80abba261fbd2aa SOURCES/linux-x64-0.19.2.tgz

2
.gitignore vendored
Unescape View File

@ -1,3 +1,3 @@
SOURCES/chromium-129.0.6668.58-clean.tar.xz
SOURCES/chromium-129.0.6668.70-clean.tar.xz
SOURCES/linux-arm64-0.19.2.tgz
SOURCES/linux-x64-0.19.2.tgz

1700
SOURCES/chromium-103.0.5060.53-update-rjsmin-to-1.2.0.patch
View File

File diff suppressed because it is too large Load Diff

1083
SOURCES/chromium-129-el8-atk-compiler-error.patch
View File

File diff suppressed because it is too large Load Diff

13
SOURCES/chromium-91.0.4472.77-java-only-allowed-in-android-builds.patch
Unescape View File

@ -1,13 +0,0 @@
diff -up chromium-91.0.4472.77/third_party/closure_compiler/compiler.py.java-allowed chromium-91.0.4472.77/third_party/closure_compiler/compiler.py
--- chromium-91.0.4472.77/third_party/closure_compiler/compiler.py.java-allowed 2021-06-02 17:14:48.445064647 +0000
+++ chromium-91.0.4472.77/third_party/closure_compiler/compiler.py 2021-06-02 17:15:12.994836949 +0000
@@ -13,8 +13,7 @@ import subprocess
_CURRENT_DIR = os.path.join(os.path.dirname(__file__))
-_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
-assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
+_JAVA_PATH = "java"
class Compiler(object):
"""Runs the Closure compiler on given source files to typecheck them

85
SPECS/chromium.spec
Unescape View File

@ -59,15 +59,6 @@
# set esbuild_version
%global esbuild_version 0.19.2
# set latest version for devtoolset and gcc-toolset
%global dts_version 12
%if 0%{?rhel} == 8 || 0%{?rhel} == 9
%global dts_version 13
%endif
# set name for toolset
%global toolset gcc-toolset
%if 0%{?rhel} == 8
%global chromium_pybin /usr/bin/python3.9
%else
@ -156,25 +147,11 @@
# enable|disable use_custom_libcxx
%global use_custom_libcxx 1
# enable clang by default
%global clang 1
# enable|disable control flow integrity support
%global cfi 0
%ifarch x86_64 aarch64
%if %{clang}
%if 0%{?fedora} || 0%{?rhel} > 7
%global cfi 1
%endif
%endif
%endif
# set correct toolchain
%if %{clang}
%global toolchain clang
%else
%global toolchain gcc
%endif
# enable qt backend
%global use_qt6 0
@ -296,7 +273,7 @@
%endif
Name: chromium%{chromium_channel}
Version: 129.0.6668.58
Version: 129.0.6668.70
Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
@ -314,13 +291,6 @@ Patch20: chromium-disable-font-tests.patch
# don't download binary blob
Patch21: chromium-123-screen-ai-service.patch
# Fix issue where closure_compiler thinks java is only allowed in android builds
# https://bugs.chromium.org/p/chromium/issues/detail?id=1192875
Patch65: chromium-91.0.4472.77-java-only-allowed-in-android-builds.patch
# Update rjsmin to 1.2.0
Patch69: chromium-103.0.5060.53-update-rjsmin-to-1.2.0.patch
# Disable tests on remoting build
Patch82: chromium-98.0.4758.102-remoting-no-tests.patch
@ -362,6 +332,9 @@ Patch150: chromium-124-qt6.patch
Patch305: chromium-124-el8-arm64-memory_tagging.patch
Patch306: chromium-127-el8-ifunc-header.patch
# workaround for build error due to old atk version on el8
Patch307: chromium-129-el8-atk-compiler-error.patch
# enable fstack-protector-strong
Patch312: chromium-123-fstack-protector-strong.patch
@ -496,24 +469,13 @@ Source15: https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-%{esbuil
BuildRequires: golang-github-evanw-esbuild
%endif
%if %{clang}
BuildRequires: clang
BuildRequires: clang-tools-extra
BuildRequires: llvm
BuildRequires: lld
# needs for libatomic
%if 0%{?rhel} >= 8
BuildRequires: %{toolset}-%{dts_version}-libatomic-devel
%endif
%else
%if 0%{?rhel} == 8
BuildRequires: %{toolset}-%{dts_version}-binutils, %{toolset}-%{dts_version}-libatomic-devel
%endif
%if 0%{?fedora} || 0%{?rhel} > 8
BuildRequires: gcc-c++
BuildRequires: gcc
BuildRequires: binutils
%endif
%if 0%{?rhel} && 0%{?rhel} <= 9
BuildRequires: gcc-toolset-13-libatomic-devel
%endif
BuildRequires: rustc
@ -1037,8 +999,6 @@ Qt6 UI for chromium.
%patch -P20 -p1 -b .disable-font-test
%patch -P21 -p1 -b .screen-ai-service
%patch -P65 -p1 -b .java-only-allowed
%patch -P69 -p1 -b .update-rjsmin-to-1.2.0
%patch -P82 -p1 -b .remoting-no-tests
%if ! %{bundlebrotli}
@ -1084,6 +1044,7 @@ Qt6 UI for chromium.
%patch -P305 -p1 -b .el8-memory_tagging
%patch -P306 -p1 -b .el8-ifunc-header
%endif
%patch -P307 -p1 -b .el8-atk-compiler-error
%endif
%patch -P312 -p1 -b .fstack-protector-strong
@ -1229,11 +1190,9 @@ cp -a third_party/dav1d/version/version.h third_party/dav1d/libdav1d/include/dav
%build
# reduce warnings
%if %{clang}
FLAGS=' -Wno-deprecated-declarations -Wno-unknown-warning-option -Wno-unused-command-line-argument'
FLAGS+=' -Wno-unused-but-set-variable -Wno-unused-result -Wno-unused-function -Wno-unused-variable'
FLAGS+=' -Wno-unused-const-variable -Wno-unneeded-internal-declaration -Wno-unknown-attributes -Wno-unknown-pragmas'
%endif
%if %{system_build_flags}
CFLAGS=${CFLAGS/-fexceptions}
@ -1264,29 +1223,16 @@ RUSTFLAGS=${RUSTFLAGS/debuginfo=?/debuginfo=0}
%endif
%endif
%if %{clang}
export CC=clang
export CXX=clang++
export AR=llvm-ar
export NM=llvm-nm
export READELF=llvm-readelf
%else
export CC=gcc
export CXX=g++
export AR=ar
export NM=nm
export READELF=readelf
%endif
export CFLAGS
export CXXFLAGS
export LDFLAGS
export RUSTFLAGS
# enable gcc toolset on el8
%if 0%{?rhel} == 8 && ! %{clang}
. /opt/rh/%{toolset}-%{dts_version}/enable
%endif
# need for error: the option `Z` is only accepted on the nightly compiler
export RUSTC_BOOTSTRAP=1
@ -1330,16 +1276,11 @@ CHROMIUM_CORE_GN_DEFINES+=' google_default_client_id="%{default_client_id}"'
CHROMIUM_CORE_GN_DEFINES+=' google_default_client_secret="%{default_client_secret}"'
%endif
%if %{clang}
CHROMIUM_CORE_GN_DEFINES+=' is_clang=true'
CHROMIUM_CORE_GN_DEFINES+=" clang_base_path=\"$clang_base_path\""
CHROMIUM_CORE_GN_DEFINES+=" clang_version=\"$clang_version\""
CHROMIUM_CORE_GN_DEFINES+=' clang_use_chrome_plugins=false'
CHROMIUM_CORE_GN_DEFINES+=' use_lld=true'
%else
CHROMIUM_CORE_GN_DEFINES+=' is_clang=false'
CHROMIUM_CORE_GN_DEFINES+=' use_lld=false'
%endif
# enable system rust
CHROMIUM_CORE_GN_DEFINES+=' rust_sysroot_absolute="%{_prefix}"'
@ -1974,6 +1915,16 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
%endif
%changelog
* Wed Sep 25 2024 Than Ngo <than@redhat.com> - 129.0.6668.70-1
- update to 129.0.6668.70
* High CVE-2024-9120: Use after free in Dawn
* High CVE-2024-9121: Inappropriate implementation in V8
* High CVE-2024-9122: Type Confusion in V8
* High CVE-2024-9123: Integer overflow in Skia
* Thu Sep 19 2024 Than Ngo <than@redhat.com> - 129.0.6668.58-2
- clean up
* Tue Sep 17 2024 Than Ngo <than@redhat.com> - 129.0.6668.58-1
- update to 129.0.6668.58
* High CVE-2024-8904: Type Confusion in V8

Write Preview
Loading…
Cancel
Save