[rpms/chromium] epel9-next: - Update to 136.0.7103.59

[rpms/chromium] epel9-next: - Update to 136.0.7103.59

[Than Ngo]

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : 30ebe15eb31628468b39fbb917cfd874c8b833f8
          Author : Than Ngo <than@redhat.com>
          Date   : 2025-04-30T00:18:49+02:00
          Stats  : +11/-4 in 2 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/30ebe15eb31628468b39fbb917cfd874c8b833f8?branch=epel9-next

          Log:
          - Update to 136.0.7103.59
* CVE-2025-4096: Heap buffer overflow in HTML
* CVE-2025-4050: Out of bounds memory access in DevTools
* CVE-2025-4051: Insufficient data validation in DevTools
* CVE-2025-4052: Inappropriate implementation in DevTools

---
diff --git a/chromium.spec b/chromium.spec
index 9f9ffae..b6e0fc4 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -255,7 +255,7 @@
 %endif
 
 Name:	chromium
-Version: 136.0.7103.48
+Version: 136.0.7103.59
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1262,8 +1262,8 @@ sed -i 's|OFFICIAL_BUILD|GOOGLE_CHROME_BUILD|g' tools/generate_shim_headers/gene
 
 CHROMIUM_CORE_GN_DEFINES+=' chrome_pgo_phase=0'
 
-%if %{cfi}
-CHROMIUM_CORE_GN_DEFINES+=' is_cfi=true use_cfi_icall=true use_cfi_cast=true use_thin_lto=true'
+%if ! %{cfi}
+CHROMIUM_CORE_GN_DEFINES+=' is_cfi=false use_thin_lto=false'
 %endif
 
 %if %{useapikey}
@@ -1769,6 +1769,13 @@ fi
 %endif
 
 %changelog
+* Tue Apr 29 2025 Than Ngo <than@redhat.com> - 136.0.7103.59-1
+- Update to 136.0.7103.59
+  * CVE-2025-4096: Heap buffer overflow in HTML
+  * CVE-2025-4050: Out of bounds memory access in DevTools
+  * CVE-2025-4051: Insufficient data validation in DevTools
+  * CVE-2025-4052: Inappropriate implementation in DevTools
+
 * Thu Apr 24 2025 Than Ngo <than@redhat.com> - 136.0.7103.48-1
 - Update to 136.0.7103.48
 

diff --git a/sources b/sources
index 5d16181..947b755 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (chromium-136.0.7103.48-clean.tar.xz) = 561f85d0cfc91cb96ad68b10f558bae32b1baf4e8e12fd396d975dbb022c2775b9f3c178c3cb0db8484d23bc47fa7b04073a8fb6c86d2336d32fecaa83a2a88f
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
+SHA512 (chromium-136.0.7103.59-clean.tar.xz) = 9a503a5772ff7b750c7eb19ca701df2797b1aa4a253c858dccb9946a95de86e6e9ba226f832892775f9c37b9054fac73d4c4999cb9bedeca2a3cb8256b572c9b