From ac183c96d3c2113c6bfaa90727d91c8d3d8a323c Mon Sep 17 00:00:00 2001 From: tigro Date: Fri, 9 Feb 2024 13:42:53 +0300 Subject: [PATCH] - update to 121.0.6167.160 * High CVE-2024-1284: Use after free in Mojo * High CVE-2024-1283: Heap buffer overflow in Skia - Sync with Fedora upstream --- .chromium.metadata | 7 +- .gitignore | 6 +- .../chromium-121-missing-header-files.patch | 56 ++++ SOURCES/chromium-121-system-libxml.patch | 24 ++ SPECS/chromium.spec | 249 +++++++++++++----- 5 files changed, 273 insertions(+), 69 deletions(-) create mode 100644 SOURCES/chromium-121-system-libxml.patch diff --git a/.chromium.metadata b/.chromium.metadata index 8ca64b73..ceed300f 100644 --- a/.chromium.metadata +++ b/.chromium.metadata @@ -1,9 +1,8 @@ -698b0c0966f2d94ee24672bece1d4251892ad3f3 SOURCES/chromium-121.0.6167.139.tar.xz +7dad8ef838e06d5a3366dcd20b342eb652d0abc2 SOURCES/chromium-121.0.6167.160.tar.xz dea187019741602d57aaf189a80abba261fbd2aa SOURCES/linux-x64-0.19.2.tgz 7e5d2c7864c5c83ec789b59c77cd9c20d2594916 SOURCES/linux-arm64-0.19.2.tgz 769196d081c6a0ad37f1c63dec56febfff3370de SOURCES/node-v20.6.1-linux-x64.tar.xz 3e94bb4f999c636293bc745b02d98e7925da5616 SOURCES/node-v20.6.1-linux-arm64.tar.xz 8e9bc55cce3899627b2810ecfe87116c5a9147b5 SOURCES/chromium-browser-gost-icons.tar.xz -6b05665ad62c12ff4ef7dc056a95e012221dee5a SOURCES/msspi-061bce0709523afaad3ea4ffa7c0bff96b5592c0.tar.gz -5ba977393ef2ab8a85feed02d538800f09e5cf3c SOURCES/chromium-gost-aff4f48d738ad3749a3aa7544191f3318e2b9a84.tar.gz -feede7756fe80d065dec7a30b6786d4af0b25939 SOURCES/msspi-78f4c728303ba8c863c45fc1fda595b0b56741b8.tar.gz +3492a65d81b8b01d419eb15bd8dc68d23f210bc9 SOURCES/Chromium-Gost-be00390a8bd3cf445bcaaeccada3324f4e1067b3.tar.xz +8217473520ee01277f8279bb69877fe12be3818b SOURCES/msspi-6a2dba691dfcaa7a17aace6f798b8d5024631489.tar.xz diff --git a/.gitignore b/.gitignore index cc9b2a49..359ba5e8 100644 --- a/.gitignore +++ b/.gitignore @@ -1,8 +1,8 @@ -SOURCES/chromium-121.0.6167.139.tar.xz +SOURCES/chromium-121.0.6167.160.tar.xz SOURCES/linux-x64-0.19.2.tgz SOURCES/linux-arm64-0.19.2.tgz SOURCES/node-v20.6.1-linux-x64.tar.xz SOURCES/node-v20.6.1-linux-arm64.tar.xz SOURCES/chromium-browser-gost-icons.tar.xz -SOURCES/chromium-gost-67d65619d138e125c59fe36f458fb440b061ef2f.tar.gz -SOURCES/msspi-78f4c728303ba8c863c45fc1fda595b0b56741b8.tar.gz +SOURCES/Chromium-Gost-be00390a8bd3cf445bcaaeccada3324f4e1067b3.tar.xz +SOURCES/msspi-6a2dba691dfcaa7a17aace6f798b8d5024631489.tar.xz diff --git a/SOURCES/chromium-121-missing-header-files.patch b/SOURCES/chromium-121-missing-header-files.patch index 377de0d1..b686ed7b 100644 --- a/SOURCES/chromium-121-missing-header-files.patch +++ b/SOURCES/chromium-121-missing-header-files.patch @@ -457,3 +457,59 @@ diff -up chromium-119.0.6045.105/ui/gfx/linux/drm_util_linux.h.missing-header-fi namespace ui { int GetFourCCFormatFromBufferFormat(gfx::BufferFormat format); +diff -up chromium-121.0.6167.139/crypto/hkdf.h.me chromium-121.0.6167.139/crypto/hkdf.h +--- chromium-121.0.6167.139/crypto/hkdf.h.me 2024-02-03 17:24:49.957949670 +0100 ++++ chromium-121.0.6167.139/crypto/hkdf.h 2024-02-03 17:26:05.753312178 +0100 +@@ -7,6 +7,7 @@ + + #include + ++#include + #include + #include + +diff -up chromium-121.0.6167.139/ui/display/types/display_color_management.h.me chromium-121.0.6167.139/ui/display/types/display_color_management.h +--- chromium-121.0.6167.139/ui/display/types/display_color_management.h.me 2024-02-03 18:55:34.889499101 +0100 ++++ chromium-121.0.6167.139/ui/display/types/display_color_management.h 2024-02-03 18:55:59.608945624 +0100 +@@ -6,6 +6,7 @@ + #define UI_DISPLAY_TYPES_DISPLAY_COLOR_MANAGEMENT_H_ + + #include ++#include + + #include "third_party/skia/modules/skcms/skcms.h" + #include "ui/display/types/display_types_export.h" +diff -up chromium-121.0.6167.139/ui/gfx/x/visual_manager.cc.me chromium-121.0.6167.139/ui/gfx/x/visual_manager.cc +--- chromium-121.0.6167.139/ui/gfx/x/visual_manager.cc.me 2024-02-03 21:20:32.126285578 +0100 ++++ chromium-121.0.6167.139/ui/gfx/x/visual_manager.cc 2024-02-03 21:20:50.272607248 +0100 +@@ -2,6 +2,8 @@ + // Use of this source code is governed by a BSD-style license that can be + // found in the LICENSE file. + ++#include ++ + #include "ui/gfx/x/visual_manager.h" + + #include "base/strings/string_number_conversions.h" +diff -up chromium-121.0.6167.139/third_party/blink/renderer/platform/fonts/simple_font_data.h.me chromium-121.0.6167.139/third_party/blink/renderer/platform/fonts/simple_font_data.h +--- chromium-121.0.6167.139/third_party/blink/renderer/platform/fonts/simple_font_data.h.me 2024-02-03 22:47:05.632713381 +0100 ++++ chromium-121.0.6167.139/third_party/blink/renderer/platform/fonts/simple_font_data.h 2024-02-03 22:47:30.788293027 +0100 +@@ -26,6 +26,7 @@ + + #include + #include ++#include + + #include "build/build_config.h" + #include "third_party/blink/renderer/platform/fonts/canvas_rotation_in_vertical.h" +diff -up chromium-121.0.6167.139/chrome/browser/performance_manager/policies/probability_distribution.h.me chromium-121.0.6167.139/chrome/browser/performance_manager/policies/probability_distribution.h +--- chromium-121.0.6167.139/chrome/browser/performance_manager/policies/probability_distribution.h.me 2024-02-04 09:26:02.239427860 +0100 ++++ chromium-121.0.6167.139/chrome/browser/performance_manager/policies/probability_distribution.h 2024-02-04 09:26:10.051565081 +0100 +@@ -5,6 +5,7 @@ + #ifndef CHROME_BROWSER_PERFORMANCE_MANAGER_POLICIES_PROBABILITY_DISTRIBUTION_H_ + #define CHROME_BROWSER_PERFORMANCE_MANAGER_POLICIES_PROBABILITY_DISTRIBUTION_H_ + ++#include + #include + #include + diff --git a/SOURCES/chromium-121-system-libxml.patch b/SOURCES/chromium-121-system-libxml.patch new file mode 100644 index 00000000..da463c26 --- /dev/null +++ b/SOURCES/chromium-121-system-libxml.patch @@ -0,0 +1,24 @@ +diff -up chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor.h.me chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor.h +--- chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor.h.me 2024-02-06 08:22:36.013021582 +0100 ++++ chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor.h 2024-02-06 08:23:08.281607499 +0100 +@@ -77,7 +77,7 @@ class XSLTProcessor final : public Scrip + + void reset(); + +- static void ParseErrorFunc(void* user_data, const xmlError*); ++ static void ParseErrorFunc(void* user_data, xmlError*); + static void GenericErrorFunc(void* user_data, const char* msg, ...); + + // Only for libXSLT callbacks +diff -up chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor_libxslt.cc.me chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor_libxslt.cc +--- chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor_libxslt.cc.me 2024-02-06 08:14:32.368066214 +0100 ++++ chromium-121.0.6167.139/third_party/blink/renderer/core/xml/xslt_processor_libxslt.cc 2024-02-06 08:23:08.282607518 +0100 +@@ -66,7 +66,7 @@ void XSLTProcessor::GenericErrorFunc(voi + // It would be nice to do something with this error message. + } + +-void XSLTProcessor::ParseErrorFunc(void* user_data, const xmlError* error) { ++void XSLTProcessor::ParseErrorFunc(void* user_data, xmlError* error) { + FrameConsole* console = static_cast(user_data); + if (!console) + return; diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec index a5f68e29..93687274 100644 --- a/SPECS/chromium.spec +++ b/SPECS/chromium.spec @@ -209,27 +209,24 @@ %global use_qt6 0 %endif -# enable gtk3 by default -%global gtk3 1 - # Chromium's fork of ICU is now something we can't unbundle. # This is left here to ease the change if that ever switches. %global bundleicu 1 -# system libre2.so is not supported with use_custom_libcxx=true -# because the library's interface relies on libstdc++'s std::string and std::vector. +# bundle re2, jsoncpp, woff2 - build errors with use_custom_libcxx=true %global bundlere2 1 - -# The libxml_utils code depends on the specific bundled libxml checkout -# which is not compatible with the current code in the Fedora package as of -# 2017-06-08. -%global bundlelibxml 1 - +%global bundlejsoncpp 1 +%global bundlewoff2 1 %global bundlelibaom 1 +%global bundlelibavif 1 +%global bundledav1d 1 +%global bundlesnappy 1 # Fedora's Python 2 stack is being removed, we use the bundled Python libraries # This can be revisited once we upgrade to Python 3 %global bundlepylibs 0 +%global bundlelibxslt 0 +%global bundleflac 0 # RHEL 7.9 dropped minizip. # enable bundleminizip for Fedora > 39 due to switch to minizip-ng @@ -251,14 +248,17 @@ %global bundlefontconfig 1 %global bundleffmpegfree 1 %global bundlebrotli 1 +%global bundlelibopenjpeg2 1 +%global bundlelcms2 1 +%global bundlelibtiff 1 +%global bundlecrc32c 1 +%global bundledoubleconversion 1 +%global bundlelibsecret 1 +%global bundlelibXNVCtrl 1 +%global bundlelibxml 1 +%global bundlelibevent 1 %else -%if 0%{?fedora} > 37 -%global bundleharfbuzz 0 -%else -%global bundleharfbuzz 1 -%endif -# disable system brotli due to old system brotli on el and fedora < 38 -%if 0%{?fedora} > 38 +%if 0%{?fedora} > 38 || 0%{?rhel} > 9 %global bundlebrotli 0 %else %global bundlebrotli 1 @@ -272,14 +272,29 @@ %global bundlefontconfig 0 %global bundleffmpegfree 0 %global bundlefreetype 0 +%global bundlelibopenjpeg2 0 +%global bundlelcms2 0 +%global bundlelibtiff 0 +%if 0%{?rhel} == 9 +%global bundlecrc32c 1 +%global bundleharfbuzz 1 +%else +%global bundlecrc32c 0 +%global bundleharfbuzz 0 +%endif +%global bundledoubleconversion 0 +%global bundlelibsecret 0 +%global bundlelibXNVCtrl 0 +%global bundlelibxml 0 +%global bundlelibevent 0 %endif %if %{with gost} # Build with GOST patches # https://github.com/deemru/chromium-gost/ %global gost_build 1 -%define chromium_gost_commit aff4f48d738ad3749a3aa7544191f3318e2b9a84 -%define msspi_commit 78f4c728303ba8c863c45fc1fda595b0b56741b8 +%define chromium_gost_commit be00390a8bd3cf445bcaaeccada3324f4e1067b3 +%define msspi_commit 6a2dba691dfcaa7a17aace6f798b8d5024631489 %define chromium_path_gost %{_builddir}/chromium-gost %endif @@ -317,8 +332,8 @@ %endif Name: chromium%{chromium_channel} -Version: 121.0.6167.139 -Release: 2%{?dist}.inferit +Version: 121.0.6167.160 +Release: 1%{?dist}.inferit Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use Url: http://www.chromium.org/Home License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only) @@ -372,10 +387,8 @@ Patch82: chromium-98.0.4758.102-remoting-no-tests.patch # patch for using system brotli Patch89: chromium-116-system-brotli.patch -# disable GlobalMediaControlsCastStartStop to avoid crash -# when using the address bar media player button -# it works with use_custom_libcxx=true -Patch90: chromium-120-disable-GlobalMediaControlsCastStartStop.patch +# patch for using system libxml +Patch90: chromium-121-system-libxml.patch # patch for using system opus Patch91: chromium-108-system-opus.patch @@ -546,7 +559,7 @@ Source50: https://upload.wikimedia.org/wikipedia/commons/f/f1/Yandex_logo_2021_R %if %{with gost} # GOST -Source101: https://github.com/deemru/chromium-gost/archive/%{chromium_gost_commit}.tar.gz#/chromium-gost-%{chromium_gost_commit}.tar.gz +Source101: https://github.com/deemru/chromium-gost/archive/%{chromium_gost_commit}.tar.gz#/Chromium-Gost-%{chromium_gost_commit}.tar.gz Source102: https://github.com/deemru/msspi/archive/%{msspi_commit}.tar.gz#/msspi-%{msspi_commit}.tar.gz Source103: chromium-browser-gost-icons.tar.xz %endif @@ -697,17 +710,58 @@ BuildRequires: dbus-glib-devel # For eu-strip BuildRequires: elfutils BuildRequires: elfutils-libelf-devel +%if ! %{bundleflac} BuildRequires: flac-devel +%endif %if ! %{bundlefreetype} BuildRequires: freetype-devel %endif +%if ! %{bundlecrc32c} +BuildRequires: google-crc32c-devel +%endif + +%if ! %{bundlewoff2} +BuildRequires: woff2-devel +%endif + +%if ! %{bundledav1d} +BuildRequires: libdav1d-devel +%endif + +%if ! %{bundlelibavif} +BuildRequires: libavif-devel +%endif + +%if ! %{bundlejsoncpp} +BuildRequires: jsoncpp-devel +%endif + +%if ! %{bundlelibsecret} +BuildRequires: libsecret-devel +%endif + +%if ! %{bundledoubleconversion} +BuildRequires: double-conversion-devel +%endif + +%if ! %{bundlesnappy} +BuildRequires: snappy-devel +%endif + +%if ! %{bundlelibXNVCtrl} +BuildRequires: libXNVCtrl-devel +%endif + + # One of the python scripts invokes git to look for a hash. So helpful. BuildRequires: /usr/bin/git BuildRequires: hwdata BuildRequires: kernel-headers +%if ! %{bundlelibevent} BuildRequires: libevent-devel +%endif BuildRequires: libffi-devel %if ! %{bundleicu} @@ -729,6 +783,18 @@ BuildRequires: libjpeg-devel BuildRequires: libpng-devel %endif +%if ! %{bundlelibopenjpeg2} +BuildRequires: openjpeg2-devel +%endif + +%if ! %{bundlelcms2} +BuildRequires: lcms2-devel +%endif + +%if ! %{bundlelibtiff} +BuildRequires: libtiff-devel +%endif + BuildRequires: libudev-devel %if ! %{bundlelibusbx} @@ -747,7 +813,10 @@ BuildRequires: libva-devel BuildRequires: libwebp-devel %endif +%if ! %{bundlelibxslt} BuildRequires: libxslt-devel +%endif + BuildRequires: libxshmfence-devel # Same here, it seems. @@ -820,12 +889,7 @@ Requires: system-bookmarks Requires: nss%{_isa} >= 3.26 Requires: nss-mdns%{_isa} -# GTK modules it expects to find for some reason. -%if %{gtk3} Requires: libcanberra-gtk3%{_isa} -%else -Requires: libcanberra-gtk2%{_isa} -%endif %if 0%{?fedora} # This enables support for u2f tokens @@ -1109,8 +1173,10 @@ sed -i 's/std::string data_dir_basename = "chromium"/std::string data_dir_basena %patch -P89 -p1 -b .system-brotli %endif -%if ! %{use_custom_libcxx} -%patch -P90 -p1 -b .disable-GlobalMediaControlsCastStartStop +%if ! %{bundlelibxml} +%if 0%{?fedora} && 0%{?fedora} < 40 || 0%{?rhel} && 0%{?rhel} < 10 +%patch -P90 -p1 -b .system-libxml +%endif %endif %if ! %{bundleopus} @@ -1360,10 +1426,7 @@ sed -i 's|OFFICIAL_BUILD|GOOGLE_CHROME_BUILD|g' tools/generate_shim_headers/gene CHROMIUM_CORE_GN_DEFINES+=' chrome_pgo_phase=0' -%if %{cfi} -CHROMIUM_CORE_GN_DEFINES+=' is_cfi=true' - -%else +%if ! %{cfi} CHROMIUM_CORE_GN_DEFINES+=' is_cfi=false' %endif @@ -1391,7 +1454,7 @@ CHROMIUM_CORE_GN_DEFINES+=' use_lld=false' CHROMIUM_CORE_GN_DEFINES+=' rust_sysroot_absolute="%{_prefix}"' CHROMIUM_CORE_GN_DEFINES+=" rustc_version=\"$rustc_version\"" -CHROMIUM_CORE_GN_DEFINES+=' use_sysroot=false disable_fieldtrial_testing_config=true' +CHROMIUM_CORE_GN_DEFINES+=' use_sysroot=false' %if %{use_gold} CHROMIUM_CORE_GN_DEFINES+=' use_gold=true' @@ -1407,9 +1470,7 @@ CHROMIUM_CORE_GN_DEFINES+=' icu_use_data_file=true' CHROMIUM_CORE_GN_DEFINES+=' target_os="linux"' CHROMIUM_CORE_GN_DEFINES+=' current_os="linux"' CHROMIUM_CORE_GN_DEFINES+=' treat_warnings_as_errors=false' -%if %{use_custom_libcxx} -CHROMIUM_CORE_GN_DEFINES+=' use_custom_libcxx=true' -%else +%if ! %{use_custom_libcxx} CHROMIUM_CORE_GN_DEFINES+=' use_custom_libcxx=false' %endif CHROMIUM_CORE_GN_DEFINES+=' enable_iterator_debugging=false' @@ -1417,7 +1478,6 @@ CHROMIUM_CORE_GN_DEFINES+=' enable_vr=false' CHROMIUM_CORE_GN_DEFINES+=' build_dawn_tests=false enable_perfetto_unittests=false' CHROMIUM_CORE_GN_DEFINES+=' disable_fieldtrial_testing_config=true' CHROMIUM_CORE_GN_DEFINES+=' symbol_level=%{debug_level}' -CHROMIUM_CORE_GN_DEFINES+=' blink_enable_generated_code_formatting=false' CHROMIUM_CORE_GN_DEFINES+=' angle_has_histograms=false' export CHROMIUM_CORE_GN_DEFINES @@ -1447,7 +1507,6 @@ CHROMIUM_BROWSER_GN_DEFINES+=' use_qt6=false' CHROMIUM_BROWSER_GN_DEFINES+=' use_gio=true use_pulseaudio=true' CHROMIUM_BROWSER_GN_DEFINES+=' enable_hangout_services_extension=true' -CHROMIUM_BROWSER_GN_DEFINES+=' use_aura=true' CHROMIUM_BROWSER_GN_DEFINES+=' enable_widevine=true' %if %{use_vaapi} @@ -1464,7 +1523,28 @@ CHROMIUM_BROWSER_GN_DEFINES+=' use_v4l2_codec=true' CHROMIUM_BROWSER_GN_DEFINES+=' rtc_use_pipewire=true rtc_link_pipewire=true' %endif +%if ! %{bundlelibjpeg} +CHROMIUM_BROWSER_GN_DEFINES+=' use_system_libjpeg=true' +%endif + +%if ! %{bundlelibpng} +CHROMIUM_BROWSER_GN_DEFINES+=' use_system_libpng=true' +%endif + +%if ! %{bundlelibopenjpeg2} +CHROMIUM_BROWSER_GN_DEFINES+=' use_system_libopenjpeg2=true' +%endif + +%if ! %{bundlelcms2} +CHROMIUM_BROWSER_GN_DEFINES+=' use_system_lcms2=true' +%endif + +%if ! %{bundlelibtiff} +CHROMIUM_BROWSER_GN_DEFINES+=' use_system_libtiff=true' +%endif + CHROMIUM_BROWSER_GN_DEFINES+=' use_system_libffi=true' + export CHROMIUM_BROWSER_GN_DEFINES # headless gn defines @@ -1480,54 +1560,94 @@ CHROMIUM_HEADLESS_GN_DEFINES+=' use_qt=false use_qt6=false is_component_build=fa CHROMIUM_HEADLESS_GN_DEFINES+=' media_use_libvpx=false proprietary_codecs=false' export CHROMIUM_HEADLESS_GN_DEFINES -build/linux/unbundle/replace_gn_files.py --system-libraries \ +# use system libraries +system_libs=() %if ! %{bundlelibaom} - libaom \ + system_libs+=(libaom) +%endif +%if ! %{bundlelibavif} + system_libs+=(libavif) %endif %if ! %{bundlebrotli} - brotli \ + system_libs+=(brotli) +%endif +%if ! %{bundlecrc32c} + system_libs+=(crc32c) +%endif +%if ! %{bundledav1d} + system_libs+=(dav1d) %endif %if ! %{bundlefontconfig} - fontconfig \ + system_libs+=(fontconfig) +%endif +%if ! %{bundleffmpegfree} + system_libs+=(ffmpeg) %endif %if ! %{bundlefreetype} - freetype \ + system_libs+=(freetype) %endif %if ! %{bundleharfbuzz} - harfbuzz-ng \ + system_libs+=(harfbuzz-ng) %endif %if ! %{bundleicu} - icu \ + system_libs+=(icu) %endif %if ! %{bundlelibdrm} - libdrm \ + system_libs+=(libdrm) +%endif +%if ! %{bundlelibevent} + system_libs+=(libevent) %endif %if ! %{bundlelibjpeg} - libjpeg \ + system_libs+=(libjpeg) %endif %if ! %{bundlelibpng} - libpng \ + system_libs+=(libpng) %endif %if ! %{bundlelibusbx} - libusb \ + system_libs+=(libusb) %endif %if ! %{bundlelibwebp} - libwebp \ + system_libs+=(libwebp) %endif %if ! %{bundlelibxml} - libxml \ + system_libs+=(libxml) +%endif +%if ! %{bundlelibxslt} + system_libs+=(libxslt) %endif - libxslt \ %if ! %{bundleopus} - opus \ + system_libs+=(opus) %endif %if ! %{bundlere2} - re2 \ + system_libs+=(re2) +%endif +%if ! %{bundlewoff2} + system_libs+=(woff2) %endif %if ! %{bundleminizip} - zlib \ + system_libs+=(zlib) +%endif +%if ! %{bundlejsoncpp} + system_libs+=(jsoncpp) +%endif +%if ! %{bundledoubleconversion} + system_libs+=(double-conversion) +%endif +%if ! %{bundlelibsecret} + system_libs+=(libsecret) +%endif +%if ! %{bundlesnappy} + system_libs+=(snappy) +%endif +%if ! %{bundlelibXNVCtrl} + system_libs+=(libXNVCtrl) +%endif +%if ! %{bundleflac} + system_libs+=(flac) %endif - flac + +build/linux/unbundle/replace_gn_files.py --system-libraries ${system_libs[@]} # Check that there is no system 'google' module, shadowing bundled ones: if python3 -c 'import google ; print google.__path__' 2> /dev/null ; then \ @@ -1944,6 +2064,11 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt %endif %changelog +* Fri Feb 09 2024 Arkady L. Shane - 121.0.6167.160-1.inferit +- update to 121.0.6167.160 + * High CVE-2024-1284: Use after free in Mojo + * High CVE-2024-1283: Heap buffer overflow in Skia + * Sat Feb 3 2024 Arkady L. Shane - 121.0.6167.139-2.inferit - Define missing bundlelibwebp variable - update to 121.0.6167.139