public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] f44: - Update to 151.0.7922.108
@ 2026-08-07 12:41 Than Ngo
0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 12:41 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : f44
Commit : 057311780c79e8354be55a8bc0c87c81bc074141
Author : Than Ngo <than@redhat.com>
Date : 2026-08-07T14:41:11+02:00
Stats : +61/-2 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/057311780c79e8354be55a8bc0c87c81bc074141?branch=f44
Log:
- Update to 151.0.7922.108
* CVE-2026-19137: Use after free in WebGL
* CVE-2026-19138: Heap buffer overflow in CrashReporting
* CVE-2026-19139: Race in CredentialProvider
* CVE-2026-19140: Use after free in GPU
* CVE-2026-19141: Use after free in Resources
* CVE-2026-19142: Use after free in Views
* CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
* CVE-2026-19144: Use after free in HTML
* CVE-2026-19145: Use after free in Translate
* CVE-2026-19146: Uninitialized Use in GPU
* CVE-2026-19147: Use after free in Aura
* CVE-2026-19148: Out of bounds write in GPU
* CVE-2026-19149: Use after free in Aura
* CVE-2026-19150: Inappropriate implementation in V8
* CVE-2026-19151: Use after free in V8
* CVE-2026-19152: Inappropriate implementation in Navigation
* CVE-2026-19153: Insufficient validation of untrusted input in Workers
* CVE-2026-19154: Use after free in Skia
* CVE-2026-19155: Use after free in Payments
* CVE-2026-19156: Heap buffer overflow in Base
* CVE-2026-19157: Out of bounds write in ANGLE
* CVE-2026-19158: Use after free in Views
* CVE-2026-19159: Use after free in Views
* CVE-2026-19160: Uninitialized Use in Skia
* CVE-2026-19161: Uninitialized Use in Skia
* CVE-2026-19162: Out of bounds write in V8
* CVE-2026-19163: Use after free in Media
* CVE-2026-19164: Insufficient validation of untrusted input in Codecs
* CVE-2026-19165: Use after free in Extensions
* CVE-2026-19166: Use after free in Web Authentication
* CVE-2026-19167: Integer overflow in GPU
* CVE-2026-19168: Inappropriate implementation in V8
* CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
* CVE-2026-19170: Use after free in WebGL
* CVE-2026-19171: Use after free in Media
* CVE-2026-19172: Use after free in Views
* CVE-2026-19173: Out of bounds write in Skia
* CVE-2026-19174: Integer overflow in V8
* CVE-2026-19175: Use after free in Payments
* CVE-2026-19176: Use after free in Skia
* CVE-2026-19177: Insufficient validation of untrusted input in UI
---
diff --git a/chromium.spec b/chromium.spec
index c4187a7..20bf590 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -271,7 +271,7 @@
%endif
Name: chromium
-Version: 151.0.7922.71
+Version: 151.0.7922.108
Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
@@ -296,6 +296,9 @@ Patch22: chromium-131-fix-qt-ui.pach
#//chrome/test:captured_sites_interactive_tests(//build/toolchain/linux/unbundle:default)
# needs //third_party/libpng:libpng_for_testonly(//build/toolchain/linux/unbundle:default)
Patch23: chromium-143-revert-libpng_for_testonly.patch
+
+# patch from Melvin - melvin@pixilab.se
+Patch24: glibc-2.42-baud-rate-fix.patch
# disable enterprise_companion_integration_tests due to Unresolved dependencies
Patch31: chromium-145-disable-enterprise_companion_integration_tests.patch
@@ -1075,6 +1078,7 @@ Qt6 UI for chromium.
%endif
%patch -P23 -p1 -R -b .revert-libpng_for_testonly
+%patch -P24 -p1 -b .glibc-2.42-baud-rate-fix
%patch -P31 -p1 -b .disable-enterprise_companion_integration_tests
%if ! %{bundlebrotli}
@@ -1913,6 +1917,50 @@ fi
%endif
%changelog
+* Fri Aug 07 2026 Than Ngo <than@redhat.com> - 151.0.7922.108-1
+- Update to 151.0.7922.108
+ * CVE-2026-19137: Use after free in WebGL
+ * CVE-2026-19138: Heap buffer overflow in CrashReporting
+ * CVE-2026-19139: Race in CredentialProvider
+ * CVE-2026-19140: Use after free in GPU
+ * CVE-2026-19141: Use after free in Resources
+ * CVE-2026-19142: Use after free in Views
+ * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
+ * CVE-2026-19144: Use after free in HTML
+ * CVE-2026-19145: Use after free in Translate
+ * CVE-2026-19146: Uninitialized Use in GPU
+ * CVE-2026-19147: Use after free in Aura
+ * CVE-2026-19148: Out of bounds write in GPU
+ * CVE-2026-19149: Use after free in Aura
+ * CVE-2026-19150: Inappropriate implementation in V8
+ * CVE-2026-19151: Use after free in V8
+ * CVE-2026-19152: Inappropriate implementation in Navigation
+ * CVE-2026-19153: Insufficient validation of untrusted input in Workers
+ * CVE-2026-19154: Use after free in Skia
+ * CVE-2026-19155: Use after free in Payments
+ * CVE-2026-19156: Heap buffer overflow in Base
+ * CVE-2026-19157: Out of bounds write in ANGLE
+ * CVE-2026-19158: Use after free in Views
+ * CVE-2026-19159: Use after free in Views
+ * CVE-2026-19160: Uninitialized Use in Skia
+ * CVE-2026-19161: Uninitialized Use in Skia
+ * CVE-2026-19162: Out of bounds write in V8
+ * CVE-2026-19163: Use after free in Media
+ * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
+ * CVE-2026-19165: Use after free in Extensions
+ * CVE-2026-19166: Use after free in Web Authentication
+ * CVE-2026-19167: Integer overflow in GPU
+ * CVE-2026-19168: Inappropriate implementation in V8
+ * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
+ * CVE-2026-19170: Use after free in WebGL
+ * CVE-2026-19171: Use after free in Media
+ * CVE-2026-19172: Use after free in Views
+ * CVE-2026-19173: Out of bounds write in Skia
+ * CVE-2026-19174: Integer overflow in V8
+ * CVE-2026-19175: Use after free in Payments
+ * CVE-2026-19176: Use after free in Skia
+ * CVE-2026-19177: Insufficient validation of untrusted input in UI
+
* Thu Jul 30 2026 Than Ngo <than@redhat.com> - 151.0.7922.71-1
- Update to 151.0.7922.71
* CVE-2026-17650: Use after free in Compositing
diff --git a/glibc-2.42-baud-rate-fix.patch b/glibc-2.42-baud-rate-fix.patch
new file mode 100644
index 0000000..5cf8333
--- /dev/null
+++ b/glibc-2.42-baud-rate-fix.patch
@@ -0,0 +1,11 @@
+--- a/services/device/serial/serial_io_handler_posix.cc 2025-11-09 13:57:16.132379788 +0100
++++ b/services/device/serial/serial_io_handler_posix.cc 2025-11-09 14:07:13.488376598 +0100
+@@ -51,7 +51,7 @@
+ bool BitrateToSpeedConstant(int bitrate, speed_t* speed) {
+ #define BITRATE_TO_SPEED_CASE(x) \
+ case x: \
+- *speed = B##x; \
++ *speed = __B##x; \
+ return true;
+ switch (bitrate) {
+ BITRATE_TO_SPEED_CASE(0)
diff --git a/sources b/sources
index 4579b79..c9e1c4d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-151.0.7922.71-clean.tar.xz) = 81ea7343f4fee4fc1a66a7fab47d2d691bbdbbb2db7b903f630fbbcd9cdebc2a0706d8f4831ea7d2dc25c5201a18946f36b0ce11f2e123b30c88f70f26ba929f
+SHA512 (chromium-151.0.7922.108-clean.tar.xz) = 7ba07b2e23e4d579529147584e820e5c48452f45ae212360f957b336649e6ed9a64fadd6269ba3de62a6bf441d4923f67d248c44190efa0566d59c5a8dc05f4e
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-07 12:41 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 12:41 [rpms/chromium] f44: - Update to 151.0.7922.108 Than Ngo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox