Merge branch 'rawhide' into epel8

chromium-91.0.4472.77-java-only-allowed-in-android-builds.patch

@@ -1,13 +0,0 @@
-diff -up chromium-91.0.4472.77/third_party/closure_compiler/compiler.py.java-allowed chromium-91.0.4472.77/third_party/closure_compiler/compiler.py
---- chromium-91.0.4472.77/third_party/closure_compiler/compiler.py.java-allowed	2021-06-02 17:14:48.445064647 +0000
-+++ chromium-91.0.4472.77/third_party/closure_compiler/compiler.py	2021-06-02 17:15:12.994836949 +0000
-@@ -13,8 +13,7 @@ import subprocess
- 
- 
- _CURRENT_DIR = os.path.join(os.path.dirname(__file__))
--_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
--assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
-+_JAVA_PATH = "java"
- 
- class Compiler(object):
-   """Runs the Closure compiler on given source files to typecheck them

chromium.spec

@@ -59,15 +59,6 @@
 # set esbuild_version
 %global esbuild_version 0.19.2
 
-# set latest version for devtoolset and gcc-toolset
-%global dts_version 12
-%if 0%{?rhel} == 8 || 0%{?rhel} == 9
-%global dts_version 13
-%endif
-
-# set name for toolset
-%global toolset gcc-toolset
-
 %if 0%{?rhel} == 8
 %global chromium_pybin /usr/bin/python3.9
 %else
@@ -156,25 +147,11 @@
 # enable|disable use_custom_libcxx
 %global use_custom_libcxx 1
 
-# enable clang by default
-%global clang 1
-
 # enable|disable control flow integrity support
 %global cfi 0
 %ifarch x86_64 aarch64
-%if %{clang}
-%if 0%{?fedora} || 0%{?rhel} > 7
 %global cfi 1
 %endif
-%endif
-%endif
-
-# set correct toolchain
-%if %{clang}
-%global toolchain clang
-%else
-%global toolchain gcc
-%endif
 
 # enable qt backend
 %global use_qt6 0
@@ -296,7 +273,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 129.0.6668.58
+Version: 129.0.6668.70
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -314,13 +291,6 @@ Patch20: chromium-disable-font-tests.patch
 # don't download binary blob
 Patch21: chromium-123-screen-ai-service.patch
 
-# Fix issue where closure_compiler thinks java is only allowed in android builds
-# https://bugs.chromium.org/p/chromium/issues/detail?id=1192875
-Patch65: chromium-91.0.4472.77-java-only-allowed-in-android-builds.patch
-
-# Update rjsmin to 1.2.0
-Patch69: chromium-103.0.5060.53-update-rjsmin-to-1.2.0.patch
-
 # Disable tests on remoting build
 Patch82: chromium-98.0.4758.102-remoting-no-tests.patch
 
@@ -499,24 +469,13 @@ Source15: https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-%{esbuil
 BuildRequires: golang-github-evanw-esbuild
 %endif
 
-%if %{clang}
 BuildRequires: clang
 BuildRequires: clang-tools-extra
 BuildRequires: llvm
 BuildRequires: lld
-# needs for libatomic
+
-%if 0%{?rhel} >= 8
+%if 0%{?rhel} && 0%{?rhel} <= 9
-BuildRequires: %{toolset}-%{dts_version}-libatomic-devel
+BuildRequires: gcc-toolset-13-libatomic-devel
-%endif
-%else
-%if 0%{?rhel} == 8
-BuildRequires: %{toolset}-%{dts_version}-binutils, %{toolset}-%{dts_version}-libatomic-devel
-%endif
-%if 0%{?fedora} || 0%{?rhel} > 8
-BuildRequires: gcc-c++
-BuildRequires: gcc
-BuildRequires: binutils
-%endif
 %endif
 
 BuildRequires: rustc
@@ -1040,8 +999,6 @@ Qt6 UI for chromium.
 %patch -P20 -p1 -b .disable-font-test
 %patch -P21 -p1 -b .screen-ai-service
 
-%patch -P65 -p1 -b .java-only-allowed
-%patch -P69 -p1 -b .update-rjsmin-to-1.2.0
 %patch -P82 -p1 -b .remoting-no-tests
 
 %if ! %{bundlebrotli}
@@ -1233,11 +1190,9 @@ cp -a third_party/dav1d/version/version.h third_party/dav1d/libdav1d/include/dav
 %build
 
 # reduce warnings
-%if %{clang}
 FLAGS=' -Wno-deprecated-declarations -Wno-unknown-warning-option -Wno-unused-command-line-argument'
 FLAGS+=' -Wno-unused-but-set-variable -Wno-unused-result -Wno-unused-function -Wno-unused-variable'
 FLAGS+=' -Wno-unused-const-variable -Wno-unneeded-internal-declaration -Wno-unknown-attributes -Wno-unknown-pragmas'
-%endif
 
 %if %{system_build_flags}
 CFLAGS=${CFLAGS/-fexceptions}
@@ -1268,29 +1223,16 @@ RUSTFLAGS=${RUSTFLAGS/debuginfo=?/debuginfo=0}
 %endif
 %endif
 
-%if %{clang}
 export CC=clang
 export CXX=clang++
 export AR=llvm-ar
 export NM=llvm-nm
 export READELF=llvm-readelf
-%else
-export CC=gcc
-export CXX=g++ 
-export AR=ar
-export NM=nm
-export READELF=readelf
-%endif
 export CFLAGS
 export CXXFLAGS
 export LDFLAGS
 export RUSTFLAGS
 
-# enable gcc toolset on el8
-%if 0%{?rhel} == 8 && ! %{clang}
-. /opt/rh/%{toolset}-%{dts_version}/enable
-%endif
-
 # need for error: the option `Z` is only accepted on the nightly compiler
 export RUSTC_BOOTSTRAP=1
 
@@ -1334,16 +1276,11 @@ CHROMIUM_CORE_GN_DEFINES+=' google_default_client_id="%{default_client_id}"'
 CHROMIUM_CORE_GN_DEFINES+=' google_default_client_secret="%{default_client_secret}"'
 %endif
 
-%if %{clang}
 CHROMIUM_CORE_GN_DEFINES+=' is_clang=true'
 CHROMIUM_CORE_GN_DEFINES+=" clang_base_path=\"$clang_base_path\""
 CHROMIUM_CORE_GN_DEFINES+=" clang_version=\"$clang_version\""
 CHROMIUM_CORE_GN_DEFINES+=' clang_use_chrome_plugins=false'
 CHROMIUM_CORE_GN_DEFINES+=' use_lld=true'
-%else
-CHROMIUM_CORE_GN_DEFINES+=' is_clang=false'
-CHROMIUM_CORE_GN_DEFINES+=' use_lld=false'
-%endif
 
 # enable system rust
 CHROMIUM_CORE_GN_DEFINES+=' rust_sysroot_absolute="%{_prefix}"'
@@ -1978,6 +1915,16 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Wed Sep 25 2024 Than Ngo <than@redhat.com> - 129.0.6668.70-1
+- update to 129.0.6668.70
+  * High CVE-2024-9120: Use after free in Dawn
+  * High CVE-2024-9121: Inappropriate implementation in V8
+  * High CVE-2024-9122: Type Confusion in V8
+  * High CVE-2024-9123: Integer overflow in Skia
+
+* Thu Sep 19 2024 Than Ngo <than@redhat.com> - 129.0.6668.58-2
+- clean up
+
 * Tue Sep 17 2024 Than Ngo <than@redhat.com> - 129.0.6668.58-1
 - update to 129.0.6668.58
   * High CVE-2024-8904: Type Confusion in V8

sources

@@ -2,4 +2,4 @@ SHA512 (node-v20.6.1-linux-arm64.tar.xz) = adfcaf2c22614797fd69fb46d94c1cbf64dea
 SHA512 (node-v20.6.1-linux-x64.tar.xz) = 7e15c05041a9a50f0046266aadb2e092a5aefbec19be1c7c809471add520cb57c7df3c47d88b1888b29bf2979dca3c92adddfd965370fa2a9da4ea02186464fd
 SHA512 (linux-arm64-0.19.2.tgz) = 8a0d8fec6786fffcd6954d00820037a55d61e60762c74300df0801f8db27057562c221a063bedfb8df56af9ba80abb366336987e881782c5996e6f871abd3dc6
 SHA512 (linux-x64-0.19.2.tgz) = a31cc74c4bfa54f9b75d735a1cfc944d3b5efb7c06bfba9542da9a642ae0b2d235ea00ae84d3ad0572c406405110fe7b61377af0fd15803806ef78d20fc6f05d
-SHA512 (chromium-129.0.6668.58-clean.tar.xz) = 68554cc18e325514361df3bf9a585ba4cd1923decc2317cc362c6c44998b5bcbcaf055f0e788ce527723eab57382b09d2345974fb2cc6ac48866a0d535b431a4
+SHA512 (chromium-129.0.6668.70-clean.tar.xz) = ce394984ecbb7cd6c32c32d98c68842e6aed22ccf5dfd64588afb32c830c9990070c01faefe66ee5b1a446e2ea7be20ef1abd228fccbabfb9bb4503fd4f0350d