diff --git a/.chromium.metadata b/.chromium.metadata index 7e84cf31..43a5aa0c 100644 --- a/.chromium.metadata +++ b/.chromium.metadata @@ -1,3 +1,3 @@ -3870b23900d2a7d3f1f4a9dad012bf6ba30df8d2 SOURCES/chromium-126.0.6478.55-clean.tar.xz +aef86ee08846eb4746f572613fd63dfb11caebc9 SOURCES/chromium-126.0.6478.114-clean.tar.xz 7e5d2c7864c5c83ec789b59c77cd9c20d2594916 SOURCES/linux-arm64-0.19.2.tgz dea187019741602d57aaf189a80abba261fbd2aa SOURCES/linux-x64-0.19.2.tgz diff --git a/.gitignore b/.gitignore index c9a06675..60bed13f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ -SOURCES/chromium-126.0.6478.55-clean.tar.xz +SOURCES/chromium-126.0.6478.114-clean.tar.xz SOURCES/linux-arm64-0.19.2.tgz SOURCES/linux-x64-0.19.2.tgz diff --git a/SOURCES/chromium-126-ifunc-header.patch b/SOURCES/chromium-126-ifunc-header.patch new file mode 100644 index 00000000..72368df0 --- /dev/null +++ b/SOURCES/chromium-126-ifunc-header.patch @@ -0,0 +1,15 @@ +diff -up chromium-126.0.6478.55/base/allocator/partition_allocator/src/partition_alloc/aarch64_support.h.me chromium-126.0.6478.55/base/allocator/partition_allocator/src/partition_alloc/aarch64_support.h +--- chromium-126.0.6478.55/base/allocator/partition_allocator/src/partition_alloc/aarch64_support.h.me 2024-06-12 13:09:47.539620293 -0400 ++++ chromium-126.0.6478.55/base/allocator/partition_allocator/src/partition_alloc/aarch64_support.h 2024-06-12 13:12:10.570739701 -0400 +@@ -10,9 +10,11 @@ + #include "partition_alloc/build_config.h" + #include "partition_alloc/partition_alloc_buildflags.h" + ++#if 0 + #if BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_LINUX) + #define HAS_HW_CAPS + #endif ++#endif + + #if defined(ARCH_CPU_ARM64) && defined(HAS_HW_CAPS) + #include diff --git a/SOURCES/chromium.conf b/SOURCES/chromium.conf index 4bf85435..267f62ee 100644 --- a/SOURCES/chromium.conf +++ b/SOURCES/chromium.conf @@ -17,7 +17,7 @@ FEATURES="" case "$GRAPHIC_DRIVER" in amd) - # Need new mesa with AMD multi planes support, is not yet supported in fedora + # Need new mesa with AMD multi planes support, is supported in fedora >= 40 (mesa-24.1.1 or newer) # see https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/26165 CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=vulkan --enable-accelerated-video-decode" FEATURES+="Vulkan,VulkanFromANGLE,DefaultANGLEVulkan,VaapiIgnoreDriverChecks,VaapiVideoDecoder,UseMultiPlaneFormatForHardwareVideo" diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec index 17a1c472..f7a3e2c6 100644 --- a/SPECS/chromium.spec +++ b/SPECS/chromium.spec @@ -310,7 +310,7 @@ %endif Name: chromium%{chromium_channel} -Version: 126.0.6478.55 +Version: 126.0.6478.114 Release: 1%{?dist} Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use Url: http://www.chromium.org/Home @@ -454,6 +454,7 @@ Patch150: chromium-124-qt6.patch # disable memory tagging in epel7 and epel8 on aarch64 due to new feature IFUNC-Resolver # not supported in old glibc < 2.30, error: fatal error: 'sys/ifunc.h' file not found Patch305: chromium-124-arm64-memory_tagging.patch +Patch306: chromium-126-ifunc-header.patch # compiler errors on el7/el8 and f38 (clang <17) Patch307: chromium-125-el-NativeValueTraits-p1.patch @@ -1222,6 +1223,7 @@ cp /opt/rh/%{toolset}-%{dts_version}/root/usr/include/c++/%{dts_version}/optiona %if 0%{?rhel} && 0%{?rhel} <= 8 %ifarch aarch64 %patch -P305 -p1 -b .memory_tagging +%patch -P306 -p1 -b .ifunc-header %patch -P317 -p1 -b .libdav1d-aarch64 %endif %endif @@ -2129,6 +2131,13 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt %endif %changelog +* Wed Jun 19 2024 Than Ngo - 126.0.6478.114-1 +- update to 126.0.6478.114 + * High CVE-2024-6100: Type Confusion in V8 + * High CVE-2024-6101: Inappropriate implementation in WebAssembly + * High CVE-2024-6102: Out of bounds memory access in Dawn + * High CVE-2024-6103: Use after free in Dawn + * Wed Jun 12 2024 Than Ngo - 126.0.6478.55-1 - update to 126.0.6478.55 * High CVE-2024-5830: Type Confusion in V8