59 Commits (23b8755bd994ef4f2bc785e3efbc7b255cb1032c)

Author	SHA1	Message	Date
Arkady L. Shane	c0a4345e58	- update to 127.0.6533.72 ... * CVE-2024-6988: Use after free in Downloads * CVE-2024-6989: Use after free in Loader * CVE-2024-6991: Use after free in Dawn * CVE-2024-6992: Out of bounds memory access in ANGLE * CVE-2024-6993: Inappropriate implementation in Canvas * CVE-2024-6994: Heap buffer overflow in Layout * CVE-2024-6995: Inappropriate implementation in Fullscreen * CVE-2024-6996: Race in Frames * CVE-2024-6997: Use after free in Tabs * CVE-2024-6998: Use after free in User Education * CVE-2024-6999: Inappropriate implementation in FedCM * CVE-2024-7000: Use after free in CSS. Reported by Anonymous * CVE-2024-7001: Inappropriate implementation in HTML * CVE-2024-7003: Inappropriate implementation in FedCM * CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing * CVE-2024-7005: Insufficient validation of untrusted input in Safe - fix condition for is_cfi/use_thin_lto on aarch64/ppc64le - update powerpc patches	2 months ago
Arkady L. Shane	14d721184d	- update to 126.0.6478.182 ... * High CVE-2024-6772: Inappropriate implementation in V8 * High CVE-2024-6773: Type Confusion in V8 * High CVE-2024-6774: Use after free in Screen Capture * High CVE-2024-6775: Use after free in Media Stream * High CVE-2024-6776: Use after free in Audio * High CVE-2024-6777: Use after free in Navigation * High CVE-2024-6778: Race in DevTools * High CVE-2024-6779: Out of bounds memory access in V8 - fixed rhbz#2293202, chromium Wayland UI regression - made qt5-ui and qt6-ui as subpackage	2 months ago
Arkady L. Shane	a9f07dca58	- update to 126.0.6478.126 ... * High CVE-2024-6290: Use after free in Dawn * High CVE-2024-6291: Use after free in Swiftshader * High CVE-2024-6292: Use after free in Dawn * High CVE-2024-6293: Use after free in Dawn	3 months ago
Arkady L. Shane	74ee830c4f	- update to 126.0.6478.114 ... * High CVE-2024-6100: Type Confusion in V8 * High CVE-2024-6101: Inappropriate implementation in WebAssembly * High CVE-2024-6102: Out of bounds memory access in Dawn * High CVE-2024-6103: Use after free in Dawn	3 months ago
Arkady L. Shane	825d2859e6	update to 126.0.6478.61	3 months ago
Arkady L. Shane	155a94bdfc	Update source and Gost patches	3 months ago
Sergey Cherevko	9fb0408b13	- update to 126.0.6478.55 ... * High CVE-2024-5830: Type Confusion in V8 * High CVE-2024-5831: Use after free in Dawn * High CVE-2024-5832: Use after free in Dawn * High CVE-2024-5833: Type Confusion in V8 * High CVE-2024-5834: Inappropriate implementation in Dawn * High CVE-2024-5835: Heap buffer overflow in Tab Groups * High CVE-2024-5836: Inappropriate Implementation in DevTools * High CVE-2024-5837: Type Confusion in V8 * High CVE-2024-5838: Type Confusion in V8 * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator * Medium CVE-2024-5840: Policy Bypass in CORS * Medium CVE-2024-5841: Use after free in V8 * Medium CVE-2024-5842: Use after free in Browser UI * Medium CVE-2024-5843: Inappropriate implementation in Downloads * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip * Medium CVE-2024-5845: Use after free in Audio * Medium CVE-2024-5846: Use after free in PDFium * Medium CVE-2024-5847: Use after free in PDFium	3 months ago
Arkady L. Shane	1f27cca60c	- update to 125.0.6422.141 ... * High CVE-2024-5493: Heap buffer overflow in WebRTC * High CVE-2024-5494: Use after free in Dawn * High CVE-2024-5495: Use after free in Dawn * High CVE-2024-5496: Use after free in Media Session * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs * High CVE-2024-5498: Use after free in Presentation API * High CVE-2024-5499: Out of bounds write in Streams API - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams - cleanup chromium.conf	4 months ago
Arkady L. Shane	aee3d3880e	- update to 125.0.6422.112 ... * High CVE-2024-5274: Type Confusion in V8	4 months ago
Arkady L. Shane	6abbf7c660	Added source	4 months ago
Arkady L. Shane	a09b121fe2	- update to 125.0.6422.60 ... * High CVE-2024-4947: Type Confusion in V8 * High CVE-2024-4948: Use after free in Dawn * Medium CVE-2024-4949: Use after free in V8 * Low CVE-2024-4950: Inappropriate implementation in Downloads	4 months ago
Arkady L. Shane	765d44d664	- update to 124.0.6367.207 ... - include headless_command_resources.pak for head_shell	4 months ago
Arkady L. Shane	2e3876cb26	- update to 124.0.6367.201 ... * High CVE-2024-4671: Use after free in Visuals	4 months ago
Arkady L. Shane	ca77c5cce8	- update to 124.0.6367.155 ... * High CVE-2024-4558: Use after free in ANGLE * High CVE-2024-4559: Heap buffer overflow in WebAudio	4 months ago
Arkady L. Shane	7ce6bf330a	- update to 124.0.6367.118 ... * High CVE-2024-4331: Use after free in Picture In Picture * High CVE-2024-4368: Use after free in Dawn - use system highway - fixed bz#2277228 - chromium wrapper causes library issues (symbol lookup error) - use system dav1d	5 months ago
Arkady L. Shane	9a622854df	- update to 124.0.6367.78 ... * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn	5 months ago
Arkady L. Shane	83da45e127	- update to 123.0.6312.122 ... * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn	5 months ago
Arkady L. Shane	fcf4700786	- update to 123.0.6312.105 ... * High CVE-2024-3156: Inappropriate implementation in V8 * High CVE-2024-3158: Use after free in Bookmarks * High CVE-2024-3159: Out of bounds memory access in V8	6 months ago
Arkady L. Shane	2509006083	- update to 123.0.6312.86 ... * Critical CVE-2024-2883: Use after free in ANGLE * High CVE-2024-2885: Use after free in Daw * High CVE-2024-2886: Use after free in WebCodecs * High CVE-2024-2887: Type Confusion in WebAssembly - fixed bz#2269768 - enable build ppc64le package for F40 - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date - fixed bz#2271183 - disable screen ai service	6 months ago
Arkady L. Shane	b6baa31193	Update GOST patches	6 months ago
Arkady L. Shane	0da4227ecb	Update GOST patch	6 months ago
Arkady L. Shane	19c2a5e3d0	Update MSSPI and Chromium GOST patches	6 months ago
Arkady L. Shane	87500a020e	* Thu Mar 21 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 123.0.6312.58-1.inferit ... - update to 123.0.6312.58 * High CVE-2024-2625: Object lifecycle issue in V8 * Medium CVE-2024-2626: Out of bounds read in Swiftshader * Medium CVE-2024-2627: Use after free in Canvas * Medium CVE-2024-2628: Inappropriate implementation in Downloads * Medium CVE-2024-2629: Incorrect security UI in iOS * Medium CVE-2024-2630: Inappropriate implementation in iOS * Low CVE-2024-2631: Inappropriate implementation in iOS - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date	6 months ago
Arkady L. Shane	43ecf67fca	- upstream security release 122.0.6261.128 ... * High CVE-2024-2400: Use after free in Performance Manager	6 months ago
Arkady L. Shane	3dcd21f969	- upstream security release 122.0.6261.111 ... * High CVE-2024-2173: Out of bounds memory access in V8 * High CVE-2024-2174: Inappropriate implementation in V8 * High CVE-2024-2176: Use after free in FedCM	7 months ago
Arkady L. Shane	16bbbf25cb	- upstream security release 122.0.6261.94 ... * High : Type Confusion in V8 - fixed bz#2265957, added correct platform in chromium use agent	7 months ago
Arkady L. Shane	4269ffaaca	- update to 122.0.6261.69 ... - fix build error on el8 - bz#2265039, built with -fwrapv for improved memory safety - bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability - update to 122.0.6261.57 * High CVE-2024-1669: Out of bounds memory access in Blink * High CVE-2024-1670: Use after free in Mojo * Medium CVE-2024-1671: Inappropriate implementation in Site Isolation * Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy * Medium CVE-2024-1673: Use after free in Accessibility * Medium CVE-2024-1674: Inappropriate implementation in Navigation * Medium CVE-2024-1675: Insufficient policy enforcement in Download * Low CVE-2024-1676: Inappropriate implementation in Navigation.	7 months ago
Arkady L. Shane	2105063149	- Update to 121.0.6167.184 ... - reduce the size of relocations	7 months ago
Arkady L. Shane	ac183c96d3	- update to 121.0.6167.160 ... * High CVE-2024-1284: Use after free in Mojo * High CVE-2024-1283: Heap buffer overflow in Skia - Sync with Fedora upstream	7 months ago
Arkady L. Shane	87a66b2a7b	- Define missing bundlelibwebp variable ... - update to 121.0.6167.139 * High CVE-2024-1060: Use after free in Canvas * High CVE-2024-1059: Use after free in WebRTC * High CVE-2024-1077: Use after free in Network - Enable Qt - Support for 64K pages on Linux/AArch64	8 months ago
Arkady L. Shane	617f592bf6	Update to 121.0.6167.85	8 months ago
Arkady L. Shane	0c93358bd5	- update to 120.0.6099.224 ... * High CVE-2024-0517: Out of bounds write in V8 * High CVE-2024-0518: Type Confusion in V8 * High CVE-2024-0519: Out of bounds memory access in V8	8 months ago
Arkady L. Shane	e528f04246	Update to 120.0.6099.216	8 months ago
Arkady L. Shane	2a6879c19f	- update to 120.0.6099.129 ... * High CVE-2023-7024: Heap buffer overflow in WebRTC	9 months ago
Arkady L. Shane	e7f53876b1	- update to 120.0.6099.109 ... * High CVE-2023-6702: Type Confusion in V8 * High CVE-2023-6703: Use after free in Blink * High CVE-2023-6704: Use after free in libavif * High CVE-2023-6705: Use after free in WebRTC * High CVE-2023-6706: Use after free in FedCM * Medium CVE-2023-6707: Use after free in CSS	9 months ago
Arkady L. Shane	a566fd4c42	Update to 120.0.6099.71	9 months ago
Arkady L. Shane	c51e5ee515	- update to 120.0.6099.62 ... - drop unsupported ldflag which caused build failure - fixed bz#2252874, built with control flow integrity (CFI) support - enable qt6 UI backend - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improved security	10 months ago
Arkady L. Shane	12d53b4f18	- Update to 119.0.6045.199 ... Fix CVE-2023-6345	10 months ago
Arkady L. Shane	62760820ec	- Added bcond_with gost to build chromium-browser-gost	10 months ago
Arkady L. Shane	3bc7df07d1	Apply GOST patches	10 months ago
Arkady L. Shane	196de17727	update to 119.0.6045.123, include following security fixes: ... high CVE-2023-5996: Use after free in WebAudio	11 months ago
Arkady L. Shane	55e45a866e	Update to 118.0.5993.117	11 months ago
Arkady L. Shane	86fc3e03eb	- Update to 118.0.5993.88 ... - Cleanup the package dependencies	11 months ago
Arkady L. Shane	95f775917d	- Update to 118.0.5993.70 ... - CVE-2023-5218: Use after free in Site Isolation. - CVE-2023-5487: Inappropriate implementation in Fullscreen. - CVE-2023-5484: Inappropriate implementation in Navigation. - CVE-2023-5475: Inappropriate implementation in DevTools. - CVE-2023-5483: Inappropriate implementation in Intents. - CVE-2023-5481: Inappropriate implementation in Downloads. - CVE-2023-5476: Use after free in Blink History. - CVE-2023-5474: Heap buffer overflow in PDF. - CVE-2023-5479: Inappropriate implementation in Extensions API. - CVE-2023-5485: Inappropriate implementation in Autofill. - CVE-2023-5478: Inappropriate implementation in Autofill. - CVE-2023-5477: Inappropriate implementation in Installer. - CVE-2023-5486: Inappropriate implementation in Input. - CVE-2023-5473: Use after free in Cast. - drop use_gnome_keyring as it's removed by upstream	11 months ago
Arkady L. Shane	7e891dc0ca	- Update to 117.0.5938.149 ... - fix CVE-2023-5346: Type Confusion in V8 - add workaround for the crash on BTI capable system	12 months ago
Arkady L. Shane	e4943c0737	Update to 117.0.5938.132	12 months ago
Arkady L. Shane	73afc2f7f9	- Update to 117.0.5938.92 ... - backport upstream patch to fix memory leak	1 year ago
Arkady L. Shane	9f1ccf6e17	Update to 117.0.5938.88	1 year ago
Arkady L. Shane	f6d93afbb0	Update to 117.0.5938.62	1 year ago
Arkady L. Shane	29666eb96d	Update to 116.0.5845.187	1 year ago