public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Than Ngo <than@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/chromium] epel9-next: - Update to 136.0.7103.59
Date: Fri, 07 Aug 2026 16:07:40 GMT	[thread overview]
Message-ID: <178611886096.1.12456730363274662060.rpms-chromium-30ebe15eb316@fedoraproject.org> (raw)

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : 30ebe15eb31628468b39fbb917cfd874c8b833f8
          Author : Than Ngo <than@redhat.com>
          Date   : 2025-04-30T00:18:49+02:00
          Stats  : +11/-4 in 2 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/30ebe15eb31628468b39fbb917cfd874c8b833f8?branch=epel9-next

          Log:
          - Update to 136.0.7103.59
* CVE-2025-4096: Heap buffer overflow in HTML
* CVE-2025-4050: Out of bounds memory access in DevTools
* CVE-2025-4051: Insufficient data validation in DevTools
* CVE-2025-4052: Inappropriate implementation in DevTools

---
diff --git a/chromium.spec b/chromium.spec
index 9f9ffae..b6e0fc4 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -255,7 +255,7 @@
 %endif
 
 Name:	chromium
-Version: 136.0.7103.48
+Version: 136.0.7103.59
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1262,8 +1262,8 @@ sed -i 's|OFFICIAL_BUILD|GOOGLE_CHROME_BUILD|g' tools/generate_shim_headers/gene
 
 CHROMIUM_CORE_GN_DEFINES+=' chrome_pgo_phase=0'
 
-%if %{cfi}
-CHROMIUM_CORE_GN_DEFINES+=' is_cfi=true use_cfi_icall=true use_cfi_cast=true use_thin_lto=true'
+%if ! %{cfi}
+CHROMIUM_CORE_GN_DEFINES+=' is_cfi=false use_thin_lto=false'
 %endif
 
 %if %{useapikey}
@@ -1769,6 +1769,13 @@ fi
 %endif
 
 %changelog
+* Tue Apr 29 2025 Than Ngo <than@redhat.com> - 136.0.7103.59-1
+- Update to 136.0.7103.59
+  * CVE-2025-4096: Heap buffer overflow in HTML
+  * CVE-2025-4050: Out of bounds memory access in DevTools
+  * CVE-2025-4051: Insufficient data validation in DevTools
+  * CVE-2025-4052: Inappropriate implementation in DevTools
+
 * Thu Apr 24 2025 Than Ngo <than@redhat.com> - 136.0.7103.48-1
 - Update to 136.0.7103.48
 

diff --git a/sources b/sources
index 5d16181..947b755 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (chromium-136.0.7103.48-clean.tar.xz) = 561f85d0cfc91cb96ad68b10f558bae32b1baf4e8e12fd396d975dbb022c2775b9f3c178c3cb0db8484d23bc47fa7b04073a8fb6c86d2336d32fecaa83a2a88f
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
+SHA512 (chromium-136.0.7103.59-clean.tar.xz) = 9a503a5772ff7b750c7eb19ca701df2797b1aa4a253c858dccb9946a95de86e6e9ba226f832892775f9c37b9054fac73d4c4999cb9bedeca2a3cb8256b572c9b

                 reply	other threads:[~2026-08-07 16:07 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178611886096.1.12456730363274662060.rpms-chromium-30ebe15eb316@fedoraproject.org \
    --to=than@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox