import chromium-131.0.6778.139-1.el9

.chromium.metadata

@@ -1,3 +1,3 @@
-2eff2cce3fdc518b5fb4859d27cdbdeb5fb56485  SOURCES/chromium-131.0.6778.108-clean.tar.xz
+56b776c92863b42c2ccb28b6272d6f25090333f3  SOURCES/chromium-131.0.6778.139-clean.tar.xz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz

.gitignore

@@ -1,3 +1,3 @@
-SOURCES/chromium-131.0.6778.108-clean.tar.xz
+SOURCES/chromium-131.0.6778.139-clean.tar.xz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/linux-x64-0.19.2.tgz

SOURCES/chromium.conf

@@ -24,7 +24,7 @@ fi
 FEATURES=""
 
 case "$GRAPHIC_DRIVER" in
-   amd)
+   amd|intel)
       # Need new mesa with AMD multi planes support, is supported in fedora >= 40 (mesa-24.1.1 or newer)
       # see https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/26165
       CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=vulkan --enable-accelerated-video-decode"
@@ -37,10 +37,6 @@ case "$GRAPHIC_DRIVER" in
       CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=gl"
       FEATURES+="VaapiVideoDecodeLinuxGL,VaapiVideoEncoder,VaapiOnNvidiaGPUs"
       ;;
-   intel)
-      CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=gl"
-      FEATURES+="VaapiVideoEncoder,VaapiVideoDecodeLinuxGL"
-      ;;
    *)
       CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=gl --disable-gpu-compositing"
       FEATURES+="VaapiVideoEncoder,VaapiVideoDecodeLinuxGL"

SPECS/chromium.spec

@@ -279,7 +279,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 131.0.6778.108
+Version: 131.0.6778.139
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1933,6 +1933,11 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Wed Dec 11 2024 Than Ngo <than@redhat.com> - 131.0.6778.139-1
+- Update to 131.0.6778.139
+  * High CVE-2024-12381: Type Confusion in V8
+  * High CVE-2024-12382: Use after free in Translate
+
 * Wed Dec 04 2024 Than Ngo <than@redhat.com> - 131.0.6778.108-1
 - Update to 131.0.6778.108
   * High CVE-2024-12053: Type Confusion in V8