import chromium-121.0.6167.85-1.el9.el9

.chromium.metadata

@@ -1,3 +1,3 @@
-6093b618336e43ad580a22dd721b502af4b4655b  SOURCES/chromium-121.0.6167.71-clean.tar.xz
+20f8c5535a45f3f40defd54d7e5e522c09beab64  SOURCES/chromium-121.0.6167.85-clean.tar.xz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz

.gitignore

@@ -1,3 +1,3 @@
-SOURCES/chromium-121.0.6167.71-clean.tar.xz
+SOURCES/chromium-121.0.6167.85-clean.tar.xz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/linux-x64-0.19.2.tgz

SOURCES/chromium-121-el7-default-constructor-involving-anonymous-union.patch

@@ -10,3 +10,15 @@ diff -up chromium-121.0.6167.57/content/browser/interest_group/header_direct_fro
  
  HeaderDirectFromSellerSignals::Result::Result(
      absl::optional<std::string> seller_signals,
+diff -up chromium-121.0.6167.57/components/variations/service/ui_string_overrider.cc.me chromium-121.0.6167.57/components/variations/service/ui_string_overrider.cc
+--- chromium-121.0.6167.57/components/variations/service/ui_string_overrider.cc.me	2024-01-24 08:07:50.191188397 +0100
++++ chromium-121.0.6167.57/components/variations/service/ui_string_overrider.cc	2024-01-24 08:08:55.905676634 +0100
+@@ -12,7 +12,7 @@
+ 
+ namespace variations {
+ 
+-UIStringOverrider::UIStringOverrider() = default;
++UIStringOverrider::UIStringOverrider() {}
+ 
+ UIStringOverrider::UIStringOverrider(base::span<const uint32_t> resource_hashes,
+                                      base::span<const int> resource_indices)

SPECS/chromium.spec

@@ -291,7 +291,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 121.0.6167.71
+Version: 121.0.6167.85
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1802,6 +1802,20 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %{chromium_path}/chromedriver
 
 %changelog
+* Wed Jan 24 2024 Than Ngo <than@redhat.com> - 121.0.6167.85-1
+- update to 121.0.6167.85
+  * High CVE-2024-0807: Use after free in WebAudio
+  * High CVE-2024-0812: Inappropriate implementation in Accessibility
+  * High CVE-2024-0808: Integer underflow in WebUI
+  * Medium CVE-2024-0810: Insufficient policy enforcement in DevTools
+  * Medium CVE-2024-0814: Incorrect security UI in Payments
+  * Medium CVE-2024-0813: Use after free in Reading Mode
+  * Medium CVE-2024-0806: Use after free in Passwords
+  * Medium CVE-2024-0805: Inappropriate implementation in Downloads
+  * Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
+  * Low CVE-2024-0811: Inappropriate implementation in Extensions API
+  * Low CVE-2024-0809: Inappropriate implementation in Autofill
+
 * Tue Jan 23 2024 Than Ngo <than@redhat.com> - 121.0.6167.71-1
 - update to 121.0.6167.71