chromium

Commit Graph

Author	SHA1	Message	Date
Arkady L. Shane	1e31f2188f	Revert "Downgrade Chromium Gost version" This reverts commit `cb753757c1`.	2 months ago
Arkady L. Shane	cb753757c1	Downgrade Chromium Gost version	2 months ago
Arkady L. Shane	8570359e61	- update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect security UI in Downloads * Medium CVE-2024-8907: Insufficient data validation in Omnibox * Low CVE-2024-8908: Inappropriate implementation in Autofill * Low CVE-2024-8909: Inappropriate implementation in UI	2 months ago
Arkady L. Shane	3637bd5b35	Update to 128.0.6613.137	2 months ago
Arkady L. Shane	cff4a05f3a	- update to 128.0.6613.119 * High CVE-2024-8362: Use after free in WebAudio. * High CVE-2024-7970: Out of bounds write in V8.	2 months ago
Arkady L. Shane	d5614af0cb	- update to 128.0.6613.113 * High CVE-2024-7969: Type Confusion in V8 * High CVE-2024-8193: Heap buffer overflow in Skia * High CVE-2024-8194: Type Confusion in V8 * High CVE-2024-8198: Heap buffer overflow in Skia	2 months ago
Arkady L. Shane	3dede3881f	- update to 128.0.6613.84 * High CVE-2024-7964: Use after free in Passwords * High CVE-2024-7965: Inappropriate implementation in V8 * High CVE-2024-7966: Out of bounds memory access in Skia * High CVE-2024-7967: Heap buffer overflow in Fonts * High CVE-2024-7968: Use after free in Autofill * High CVE-2024-7971: Type confusion in V8 * Medium CVE-2024-7972: Inappropriate implementation in V8 * Medium CVE-2024-7973: Heap buffer overflow in PDFium * Medium CVE-2024-7974: Insufficient data validation in V8 API * Medium CVE-2024-7975: Inappropriate implementation in Permissions * Medium CVE-2024-7976: Inappropriate implementation in FedCM * Medium CVE-2024-7977: Insufficient data validation in Installer * Medium CVE-2024-7978: Insufficient policy enforcement in Data Transfer * Medium CVE-2024-7979: Insufficient data validation in Installer * Medium CVE-2024-7980: Insufficient data validation in Installer * Low CVE-2024-7981: Inappropriate implementation in Views * Low CVE-2024-8033: Inappropriate implementation in WebApp Installs * Low CVE-2024-8034: Inappropriate implementation in Custom Tabs * Low CVE-2024-8035: Inappropriate implementation in Extensions	2 months ago
Arkady L. Shane	636e0792f6	- update to 127.0.6533.99 * Critical CVE-2024-7532: Out of bounds memory access in ANGLE * High CVE-2024-7533: Use after free in Sharing * High CVE-2024-7550: Type Confusion in V8 * High CVE-2024-7534: Heap buffer overflow in Layout * High CVE-2024-7535: Inappropriate implementation in V8 * High CVE-2024-7536: Use after free in WebAudio	3 months ago
Arkady L. Shane	d6a712050e	- update to 127.0.6533.88 * CVE-2024-6990 - refreshed ppc64le patches - workaround for build error on aarch64 F41 - remove old patch that seems to be the cause of a crash when the user set user.max_user_namespaces to 0	3 months ago
Arkady L. Shane	8a027cbcf3	workaround for missing bindgen on el8	3 months ago
Arkady L. Shane	64ad7de623	- refresh patches for aarch64 - add workaround for build error on aarch64 (highway) - update chromium-latest.py (removing unused sttuffs) - add bindgen for el8 build - add upstream patch to fix build dep in crabbyavif	3 months ago
Arkady L. Shane	c0a4345e58	- update to 127.0.6533.72 * CVE-2024-6988: Use after free in Downloads * CVE-2024-6989: Use after free in Loader * CVE-2024-6991: Use after free in Dawn * CVE-2024-6992: Out of bounds memory access in ANGLE * CVE-2024-6993: Inappropriate implementation in Canvas * CVE-2024-6994: Heap buffer overflow in Layout * CVE-2024-6995: Inappropriate implementation in Fullscreen * CVE-2024-6996: Race in Frames * CVE-2024-6997: Use after free in Tabs * CVE-2024-6998: Use after free in User Education * CVE-2024-6999: Inappropriate implementation in FedCM * CVE-2024-7000: Use after free in CSS. Reported by Anonymous * CVE-2024-7001: Inappropriate implementation in HTML * CVE-2024-7003: Inappropriate implementation in FedCM * CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing * CVE-2024-7005: Insufficient validation of untrusted input in Safe - fix condition for is_cfi/use_thin_lto on aarch64/ppc64le - update powerpc patches	4 months ago
Arkady L. Shane	14d721184d	- update to 126.0.6478.182 * High CVE-2024-6772: Inappropriate implementation in V8 * High CVE-2024-6773: Type Confusion in V8 * High CVE-2024-6774: Use after free in Screen Capture * High CVE-2024-6775: Use after free in Media Stream * High CVE-2024-6776: Use after free in Audio * High CVE-2024-6777: Use after free in Navigation * High CVE-2024-6778: Race in DevTools * High CVE-2024-6779: Out of bounds memory access in V8 - fixed rhbz#2293202, chromium Wayland UI regression - made qt5-ui and qt6-ui as subpackage	4 months ago
Arkady L. Shane	a9f07dca58	- update to 126.0.6478.126 * High CVE-2024-6290: Use after free in Dawn * High CVE-2024-6291: Use after free in Swiftshader * High CVE-2024-6292: Use after free in Dawn * High CVE-2024-6293: Use after free in Dawn	5 months ago
Arkady L. Shane	74ee830c4f	- update to 126.0.6478.114 * High CVE-2024-6100: Type Confusion in V8 * High CVE-2024-6101: Inappropriate implementation in WebAssembly * High CVE-2024-6102: Out of bounds memory access in Dawn * High CVE-2024-6103: Use after free in Dawn	5 months ago
Arkady L. Shane	825d2859e6	update to 126.0.6478.61	5 months ago
Arkady L. Shane	155a94bdfc	Update source and Gost patches	5 months ago
Sergey Cherevko	9fb0408b13	- update to 126.0.6478.55 * High CVE-2024-5830: Type Confusion in V8 * High CVE-2024-5831: Use after free in Dawn * High CVE-2024-5832: Use after free in Dawn * High CVE-2024-5833: Type Confusion in V8 * High CVE-2024-5834: Inappropriate implementation in Dawn * High CVE-2024-5835: Heap buffer overflow in Tab Groups * High CVE-2024-5836: Inappropriate Implementation in DevTools * High CVE-2024-5837: Type Confusion in V8 * High CVE-2024-5838: Type Confusion in V8 * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator * Medium CVE-2024-5840: Policy Bypass in CORS * Medium CVE-2024-5841: Use after free in V8 * Medium CVE-2024-5842: Use after free in Browser UI * Medium CVE-2024-5843: Inappropriate implementation in Downloads * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip * Medium CVE-2024-5845: Use after free in Audio * Medium CVE-2024-5846: Use after free in PDFium * Medium CVE-2024-5847: Use after free in PDFium	5 months ago
Arkady L. Shane	1f27cca60c	- update to 125.0.6422.141 * High CVE-2024-5493: Heap buffer overflow in WebRTC * High CVE-2024-5494: Use after free in Dawn * High CVE-2024-5495: Use after free in Dawn * High CVE-2024-5496: Use after free in Media Session * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs * High CVE-2024-5498: Use after free in Presentation API * High CVE-2024-5499: Out of bounds write in Streams API - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams - cleanup chromium.conf	5 months ago
Arkady L. Shane	aee3d3880e	- update to 125.0.6422.112 * High CVE-2024-5274: Type Confusion in V8	6 months ago
Arkady L. Shane	6abbf7c660	Added source	6 months ago
Arkady L. Shane	a09b121fe2	- update to 125.0.6422.60 * High CVE-2024-4947: Type Confusion in V8 * High CVE-2024-4948: Use after free in Dawn * Medium CVE-2024-4949: Use after free in V8 * Low CVE-2024-4950: Inappropriate implementation in Downloads	6 months ago
Arkady L. Shane	765d44d664	- update to 124.0.6367.207 - include headless_command_resources.pak for head_shell	6 months ago
Arkady L. Shane	2e3876cb26	- update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals	6 months ago
Arkady L. Shane	ca77c5cce8	- update to 124.0.6367.155 * High CVE-2024-4558: Use after free in ANGLE * High CVE-2024-4559: Heap buffer overflow in WebAudio	6 months ago
Arkady L. Shane	7ce6bf330a	- update to 124.0.6367.118 * High CVE-2024-4331: Use after free in Picture In Picture * High CVE-2024-4368: Use after free in Dawn - use system highway - fixed bz#2277228 - chromium wrapper causes library issues (symbol lookup error) - use system dav1d	6 months ago
Arkady L. Shane	9a622854df	- update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn	7 months ago
Arkady L. Shane	412c0260ec	- update to 124.0.6367.60 - fix waylang regression - update GOST patches - update Yandex patches	7 months ago
Arkady L. Shane	83da45e127	- update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn	7 months ago
Arkady L. Shane	fcf4700786	- update to 123.0.6312.105 * High CVE-2024-3156: Inappropriate implementation in V8 * High CVE-2024-3158: Use after free in Bookmarks * High CVE-2024-3159: Out of bounds memory access in V8	7 months ago
Arkady L. Shane	2509006083	- update to 123.0.6312.86 * Critical CVE-2024-2883: Use after free in ANGLE * High CVE-2024-2885: Use after free in Daw * High CVE-2024-2886: Use after free in WebCodecs * High CVE-2024-2887: Type Confusion in WebAssembly - fixed bz#2269768 - enable build ppc64le package for F40 - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date - fixed bz#2271183 - disable screen ai service	8 months ago
Arkady L. Shane	b6baa31193	Update GOST patches	8 months ago
Arkady L. Shane	0da4227ecb	Update GOST patch	8 months ago
Arkady L. Shane	19c2a5e3d0	Update MSSPI and Chromium GOST patches	8 months ago
Arkady L. Shane	87500a020e	* Thu Mar 21 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.58-1.inferit - update to 123.0.6312.58 * High CVE-2024-2625: Object lifecycle issue in V8 * Medium CVE-2024-2626: Out of bounds read in Swiftshader * Medium CVE-2024-2627: Use after free in Canvas * Medium CVE-2024-2628: Inappropriate implementation in Downloads * Medium CVE-2024-2629: Incorrect security UI in iOS * Medium CVE-2024-2630: Inappropriate implementation in iOS * Low CVE-2024-2631: Inappropriate implementation in iOS - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date	8 months ago
Arkady L. Shane	43ecf67fca	- upstream security release 122.0.6261.128 * High CVE-2024-2400: Use after free in Performance Manager	8 months ago
Arkady L. Shane	3dcd21f969	- upstream security release 122.0.6261.111 * High CVE-2024-2173: Out of bounds memory access in V8 * High CVE-2024-2174: Inappropriate implementation in V8 * High CVE-2024-2176: Use after free in FedCM	8 months ago
Arkady L. Shane	16bbbf25cb	- upstream security release 122.0.6261.94 * High : Type Confusion in V8 - fixed bz#2265957, added correct platform in chromium use agent	9 months ago
Arkady L. Shane	4269ffaaca	- update to 122.0.6261.69 - fix build error on el8 - bz#2265039, built with -fwrapv for improved memory safety - bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability - update to 122.0.6261.57 * High CVE-2024-1669: Out of bounds memory access in Blink * High CVE-2024-1670: Use after free in Mojo * Medium CVE-2024-1671: Inappropriate implementation in Site Isolation * Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy * Medium CVE-2024-1673: Use after free in Accessibility * Medium CVE-2024-1674: Inappropriate implementation in Navigation * Medium CVE-2024-1675: Insufficient policy enforcement in Download * Low CVE-2024-1676: Inappropriate implementation in Navigation.	9 months ago
Arkady L. Shane	2105063149	- Update to 121.0.6167.184 - reduce the size of relocations	9 months ago
Arkady L. Shane	ac183c96d3	- update to 121.0.6167.160 * High CVE-2024-1284: Use after free in Mojo * High CVE-2024-1283: Heap buffer overflow in Skia - Sync with Fedora upstream	9 months ago
Arkady L. Shane	87a66b2a7b	- Define missing bundlelibwebp variable - update to 121.0.6167.139 * High CVE-2024-1060: Use after free in Canvas * High CVE-2024-1059: Use after free in WebRTC * High CVE-2024-1077: Use after free in Network - Enable Qt - Support for 64K pages on Linux/AArch64	9 months ago
Arkady L. Shane	617f592bf6	Update to 121.0.6167.85	10 months ago
Arkady L. Shane	0c93358bd5	- update to 120.0.6099.224 * High CVE-2024-0517: Out of bounds write in V8 * High CVE-2024-0518: Type Confusion in V8 * High CVE-2024-0519: Out of bounds memory access in V8	10 months ago
Arkady L. Shane	e528f04246	Update to 120.0.6099.216	10 months ago
Arkady L. Shane	ac49df79a6	Update to 120.0.6099.199	10 months ago
Arkady L. Shane	2a6879c19f	- update to 120.0.6099.129 * High CVE-2023-7024: Heap buffer overflow in WebRTC	11 months ago
Arkady L. Shane	e7f53876b1	- update to 120.0.6099.109 * High CVE-2023-6702: Type Confusion in V8 * High CVE-2023-6703: Use after free in Blink * High CVE-2023-6704: Use after free in libavif * High CVE-2023-6705: Use after free in WebRTC * High CVE-2023-6706: Use after free in FedCM * Medium CVE-2023-6707: Use after free in CSS	11 months ago
Arkady L. Shane	a566fd4c42	Update to 120.0.6099.71	11 months ago
Arkady L. Shane	c51e5ee515	- update to 120.0.6099.62 - drop unsupported ldflag which caused build failure - fixed bz#2252874, built with control flow integrity (CFI) support - enable qt6 UI backend - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improved security	11 months ago

1 2

74 Commits (1e31f2188fd6a271b1d0a8ef2d0c50feeb230139)