public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: - Update to 135.0.7049.84
@ 2026-08-07 16:07 Than Ngo
0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 16:07 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : 0d9761748509bb12051ab149d28c1052cd834f87
Author : Than Ngo <than@redhat.com>
Date : 2025-04-09T10:55:12+02:00
Stats : +104/-93 in 5 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/0d9761748509bb12051ab149d28c1052cd834f87?branch=epel9-next
Log:
- Update to 135.0.7049.84
* CVE-2025-3066: Use after free in Site Isolation
---
diff --git a/chromium-127-rust-clanglib.patch b/chromium-127-rust-clanglib.patch
deleted file mode 100644
index d419701..0000000
--- a/chromium-127-rust-clanglib.patch
+++ /dev/null
@@ -1,89 +0,0 @@
-diff -up chromium-127.0.6533.72/build/rust/rust_bindgen.gni.me chromium-127.0.6533.72/build/rust/rust_bindgen.gni
---- chromium-127.0.6533.72/build/rust/rust_bindgen.gni.me 2024-07-25 16:11:18.754551595 +0200
-+++ chromium-127.0.6533.72/build/rust/rust_bindgen.gni 2024-07-25 16:11:33.997837660 +0200
-@@ -19,11 +19,11 @@
-
- # On Windows, the libclang.dll is beside the bindgen.exe, otherwise it is in
- # ../lib.
--_libclang_path = rust_bindgen_root
-+_libclang_path = clang_base_path
- if (host_os == "win") {
- _libclang_path += "/bin"
- } else {
-- _libclang_path += "/lib"
-+ _libclang_path += "/lib64"
- }
-
- # Template to build Rust/C bindings with bindgen.
-diff -up chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib chromium-121.0.6167.57/build/config/clang/BUILD.gn
---- chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib 2024-01-10 16:43:01.000000000 +0100
-+++ chromium-121.0.6167.57/build/config/clang/BUILD.gn 2024-01-20 19:51:38.481992799 +0100
-@@ -112,6 +112,7 @@ template("clang_lib") {
- _prefix = "lib"
- _suffix = ""
- _ext = "a"
-+ _libprefix = ""
- if (is_win) {
- _dir = "windows"
- _prefix = ""
-@@ -127,7 +128,33 @@ template("clang_lib") {
- }
- } else if (is_apple) {
- _dir = "darwin"
-- } else if (is_linux || is_chromeos) {
-+ } else if (is_linux) {
-+ if (current_cpu == "x64") {
-+ _dir = "x86_64-redhat-linux-gnu"
-+ _suffix ="-x86_64"
-+ } else if (current_cpu == "x86") {
-+ _dir = "i386-redhat-linux-gnu"
-+ _suffix = "-i386"
-+ } else if (current_cpu == "arm64") {
-+ _dir = "aarch64-redhat-linux-gnu"
-+ _suffix = "-aarch64"
-+ } else if (current_cpu == "arm") {
-+ _dir = "armhf-redhat-linux-gnu"
-+ _suffix = "-armhf"
-+ } else if (current_cpu == "ppc64") {
-+ _dir = "ppc64le-redhat-linux-gnu"
-+ _suffix = "-ppc64le"
-+ } else {
-+ assert(false) # Unhandled cpu type
-+ }
-+ # different clang lib dir in fedora/epel
-+ if (clang_version == "17" || clang_version == "18" || clang_version == "19" || clang_version == "20") {
-+ _suffix = ""
-+ } else if (clang_version == "14" || clang_version == "15" || clang_version == "16") {
-+ _libprefix = "64"
-+ _dir = ""
-+ }
-+ } else if (is_chromeos) {
- if (current_cpu == "x64") {
- _dir = "x86_64-unknown-linux-gnu"
- } else if (current_cpu == "x86") {
-@@ -166,7 +193,7 @@ template("clang_lib") {
- assert(false) # Unhandled target platform
- }
-
-- _clang_lib_dir = "$clang_base_path/lib/clang/$clang_version/lib"
-+ _clang_lib_dir = "$clang_base_path/lib${_libprefix}/clang/$clang_version/lib"
- _lib_file = "${_prefix}clang_rt.${_libname}${_suffix}.${_ext}"
- libs = [ "$_clang_lib_dir/$_dir/$_lib_file" ]
- }
-diff -up chromium-132.0.6834.57/build/rust/rust_bindgen_generator.gni.me chromium-132.0.6834.57/build/rust/rust_bindgen_generator.gni
---- chromium-132.0.6834.57/build/rust/rust_bindgen_generator.gni.me 2024-12-31 15:08:27.013151672 +0100
-+++ chromium-132.0.6834.57/build/rust/rust_bindgen_generator.gni 2024-12-31 15:08:49.538663024 +0100
-@@ -18,11 +18,11 @@
-
- # On Windows, the libclang.dll is beside the bindgen.exe, otherwise it is in
- # ../lib.
--_libclang_path = rust_bindgen_root
-+_libclang_path = clang_base_path
- if (host_os == "win") {
- _libclang_path += "/bin"
- } else {
-- _libclang_path += "/lib"
-+ _libclang_path += "/lib64"
- }
-
- # Template to build Rust/C bindings with bindgen.
diff --git a/chromium-135-rust-clanglib.patch b/chromium-135-rust-clanglib.patch
new file mode 100644
index 0000000..b212606
--- /dev/null
+++ b/chromium-135-rust-clanglib.patch
@@ -0,0 +1,90 @@
+diff -up chromium-135.0.7049.84/build/config/clang/BUILD.gn.than chromium-135.0.7049.84/build/config/clang/BUILD.gn
+--- chromium-135.0.7049.84/build/config/clang/BUILD.gn.than 2025-04-09 10:22:51.699058451 +0200
++++ chromium-135.0.7049.84/build/config/clang/BUILD.gn 2025-04-09 10:43:06.524085005 +0200
+@@ -166,8 +166,8 @@ template("clang_lib") {
+ _prefix = "lib"
+ _suffix = ""
+ _ext = "a"
++ _libprefix = ""
+
+- _clang_lib_dir = "$clang_base_path/lib/clang/$clang_version/lib"
+ if (is_win) {
+ _dir = "windows"
+ _prefix = ""
+@@ -197,7 +197,33 @@ template("clang_lib") {
+ } else {
+ assert(false) # Unhandled cpu type
+ }
+- } else if (is_linux || is_chromeos) {
++ } else if (is_linux) {
++ if (current_cpu == "x64") {
++ _dir = "x86_64-redhat-linux-gnu"
++ _suffix ="-x86_64"
++ } else if (current_cpu == "x86") {
++ _dir = "i386-redhat-linux-gnu"
++ _suffix = "-i386"
++ } else if (current_cpu == "arm64") {
++ _dir = "aarch64-redhat-linux-gnu"
++ _suffix = "-aarch64"
++ } else if (current_cpu == "arm") {
++ _dir = "armhf-redhat-linux-gnu"
++ _suffix = "-armhf"
++ } else if (current_cpu == "ppc64") {
++ _dir = "ppc64le-redhat-linux-gnu"
++ _suffix = "-ppc64le"
++ } else {
++ assert(false) # Unhandled cpu type
++ }
++ # different clang lib dir in fedora/epel
++ if (clang_version == "17" || clang_version == "18" || clang_version == "19" || clang_version == "20") {
++ _suffix = ""
++ } else if (clang_version == "14" || clang_version == "15" || clang_version == "16") {
++ _libprefix = "64"
++ _dir = ""
++ }
++ } else if (is_chromeos) {
+ if (current_cpu == "x64") {
+ _dir = "x86_64-unknown-linux-gnu"
+ } else if (current_cpu == "x86") {
+@@ -236,6 +262,7 @@ template("clang_lib") {
+ assert(false) # Unhandled target platform
+ }
+
++ _clang_lib_dir = "$clang_base_path/lib${_libprefix}/clang/$clang_version/lib"
+ _lib_file = "${_prefix}clang_rt.${_libname}${_suffix}.${_ext}"
+ libs = [ "$_clang_lib_dir/$_dir/$_lib_file" ]
+
+diff -up chromium-135.0.7049.84/build/rust/rust_bindgen_generator.gni.than chromium-135.0.7049.84/build/rust/rust_bindgen_generator.gni
+--- chromium-135.0.7049.84/build/rust/rust_bindgen_generator.gni.than 2025-04-09 10:46:48.772413981 +0200
++++ chromium-135.0.7049.84/build/rust/rust_bindgen_generator.gni 2025-04-09 10:47:15.480900587 +0200
+@@ -18,11 +18,11 @@ if (host_os == "win") {
+
+ # On Windows, the libclang.dll is beside the bindgen.exe, otherwise it is in
+ # ../lib.
+-_libclang_path = rust_bindgen_root
++_libclang_path = clang_base_path
+ if (host_os == "win") {
+ _libclang_path += "/bin"
+ } else {
+- _libclang_path += "/lib"
++ _libclang_path += "/lib64"
+ }
+
+ # Template to build Rust/C bindings with bindgen.
+diff -up chromium-135.0.7049.84/build/rust/rust_bindgen.gni.than chromium-135.0.7049.84/build/rust/rust_bindgen.gni
+--- chromium-135.0.7049.84/build/rust/rust_bindgen.gni.than 2025-04-09 10:45:53.577078718 +0200
++++ chromium-135.0.7049.84/build/rust/rust_bindgen.gni 2025-04-09 10:46:29.974649891 +0200
+@@ -19,11 +19,11 @@ if (host_os == "win") {
+
+ # On Windows, the libclang.dll is beside the bindgen.exe, otherwise it is in
+ # ../lib.
+-_libclang_path = rust_bindgen_root
++_libclang_path = clang_base_path
+ if (host_os == "win") {
+ _libclang_path += "/bin"
+ } else {
+- _libclang_path += "/lib"
++ _libclang_path += "/lib64"
+ }
+
+ # Template to build Rust/C bindings with bindgen.
diff --git a/chromium-135.0.7049.84-clean.tar.xz.hashes b/chromium-135.0.7049.84-clean.tar.xz.hashes
new file mode 100644
index 0000000..0d17a98
--- /dev/null
+++ b/chromium-135.0.7049.84-clean.tar.xz.hashes
@@ -0,0 +1,6 @@
+md5 c0f091a6a67a517c6635e795639b268e chromium-135.0.7049.84-clean.tar.xz
+sha1 d302aa94ccadb40138af4de365991804efa7f3de chromium-135.0.7049.84-clean.tar.xz
+sha224 6497e3ae78a424a48cb2f71ff4f2bd03c8b04ab6f62ae568a700218b chromium-135.0.7049.84-clean.tar.xz
+sha256 beebe9d797a1cf853436c30ead1f4e05385046e51f244de39da52d09efe6d336 chromium-135.0.7049.84-clean.tar.xz
+sha384 54def5a71ef42a4c20c08fe1eb208cb8d83b8013cacdf36a7e666d6e9011d72785715476b6fde2aaa97b5ec9f3acd868 chromium-135.0.7049.84-clean.tar.xz
+sha512 7e409a987661ed641bac798c79268e45ee8751fa0ef9371ecc1707ea8e5860c5be3e2beb810c54a943c9ba2a7a76a6627ab7735e6f632d8e24220dcd3559c231 chromium-135.0.7049.84-clean.tar.xz
diff --git a/chromium.spec b/chromium.spec
index a2fd5f2..3014bc0 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -261,8 +261,8 @@
%endif
Name: chromium
-Version: 135.0.7049.52
-Release: 2%{?dist}
+Version: 135.0.7049.84
+Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -362,7 +362,7 @@ Patch356: chromium-133-pipewire-cast.patch
Patch357: chromium-134-type-mismatch-error.patch
# set clang_lib path
-Patch358: chromium-127-rust-clanglib.patch
+Patch358: chromium-135-rust-clanglib.patch
# PowerPC64 LE support
# Timothy Pearson's patchset
@@ -1781,6 +1781,10 @@ fi
%endif
%changelog
+* Wed Apr 09 2025 Than Ngo <than@redhat.com> - 135.0.7049.84-1
+- Update to 135.0.7049.84
+ * CVE-2025-3066: Use after free in Site Isolation
+
* Wed Apr 02 2025 Jan Grulich <jgrulich@redhat.com> - 135.0.7049.52-2
- Add CFI suppressions for inline PipeWire functions
diff --git a/sources b/sources
index 31e03a9..fce3728 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
SHA512 (linux-arm64-0.19.2.tgz) = 8a0d8fec6786fffcd6954d00820037a55d61e60762c74300df0801f8db27057562c221a063bedfb8df56af9ba80abb366336987e881782c5996e6f871abd3dc6
SHA512 (linux-x64-0.19.2.tgz) = a31cc74c4bfa54f9b75d735a1cfc944d3b5efb7c06bfba9542da9a642ae0b2d235ea00ae84d3ad0572c406405110fe7b61377af0fd15803806ef78d20fc6f05d
SHA512 (linux-ppc64-0.19.2.tgz) = 749d2413c293a9b887b40dc573fce7ee509dee9a95af825c4f426a3a76e3e0b2f3627a7eee1f108b8ca37eae366651df84e08ce36ac18741301d82cbe8b13373
-SHA512 (chromium-135.0.7049.52-clean.tar.xz) = ad26ec99dde52de6f7438b906c7be592806a0d6d80e2e2be298d7e6d23ba5f91b87acff29171092e56658e3a07722a021249070e5db68684e74c4d753a3c9531
SHA512 (node-v22.14.0-linux-arm64.tar.xz) = 1b459f4fb1c52d35253c678e28198cb4f82d459eceecca64b699b80ed7ff8ac7a2d86f79dffe56cdcc783f3379a3c0a00296ce1e24d7ef5554cf1d6236f0ff16
SHA512 (node-v22.14.0-linux-ppc64le.tar.xz) = 551ba75ee8c7ff84080e0c2ace721c9a0b32e2580637806df253108c01b6b27b79293360b7696646e3b8fcd447fb29b851e91adb5a9d0dd2fed693393086cbed
SHA512 (node-v22.14.0-linux-x64.tar.xz) = acb8c6df3ad9e5b403449a003726de7733de5bb23162e6db535948589fb15570cd606924ad7ce76f42785117d938deec1e8d5781c20a3558b1ef8f8e4af41735
+SHA512 (chromium-135.0.7049.84-clean.tar.xz) = 7e409a987661ed641bac798c79268e45ee8751fa0ef9371ecc1707ea8e5860c5be3e2beb810c54a943c9ba2a7a76a6627ab7735e6f632d8e24220dcd3559c231
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-07 16:07 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:07 [rpms/chromium] epel9-next: - Update to 135.0.7049.84 Than Ngo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox