public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Than Ngo <than@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/chromium] epel9-next: - Update to 140.0.7339.185
Date: Fri, 07 Aug 2026 16:08:10 GMT	[thread overview]
Message-ID: <178611889008.1.3951464136196129275.rpms-chromium-d1eb059adc6d@fedoraproject.org> (raw)

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : d1eb059adc6d636f96d74872e31b34cb7cc13022
          Author : Than Ngo <than@redhat.com>
          Date   : 2025-09-18T08:27:27+02:00
          Stats  : +11/-5 in 3 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/d1eb059adc6d636f96d74872e31b34cb7cc13022?branch=epel9-next

          Log:
          - Update to 140.0.7339.185
* CVE-2025-10585: Type Confusion in V8
* CVE-2025-10500: Use after free in Dawn
* CVE-2025-10501: Use after free in WebRTC
* CVE-2025-10502: Heap buffer overflow in ANGLE
* Fix rendering issue on epel9

---
diff --git a/chromium.conf b/chromium.conf
index 2546104..7a1b0b2 100644
--- a/chromium.conf
+++ b/chromium.conf
@@ -13,7 +13,6 @@ NATIVE_WAYLAND=off
 
 CHROMIUM_FLAGS=""
 if [ "$NATIVE_WAYLAND" == "off" ] ; then
-   CHROMIUM_FLAGS+=" --enable-native-gpu-memory-buffers"
    CHROMIUM_FLAGS+=" --enable-gpu-memory-buffer-video-frames"
    CHROMIUM_FLAGS+=" --enable-zero-copy"
    CHROMIUM_FLAGS+=" --ignore-gpu-blocklist --disable-gpu-driver-bug-workaround"
@@ -27,14 +26,14 @@ case "$GRAPHIC_DRIVER" in
    amd|intel)
       # Need new mesa with AMD multi planes support, is supported in fedora >= 40 (mesa-24.1.1 or newer)
       # see https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/26165
-      CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=vulkan --enable-accelerated-video-decode"
+      CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=vulkan --enable-accelerated-video-decode --enable-native-gpu-memory-buffers"
       FEATURES+="Vulkan,VulkanFromANGLE,DefaultANGLEVulkan,VaapiIgnoreDriverChecks,VaapiVideoDecoder,UseMultiPlaneFormatForHardwareVideo,AcceleratedVideoDecodeLinuxZeroCopyGL"
       ;;
    nvidia)
       # The NVIDIA VaAPI drivers are known to not support Chromium
       # see https://crbug.com/1492880. This feature switch is
       # provided for developers to test VaAPI drivers on NVIDIA GPUs
-      CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=gl"
+      CHROMIUM_FLAGS+=" --use-gl=angle --use-angle=gl --enable-native-gpu-memory-buffers"
       FEATURES+="AcceleratedVideoDecodeLinuxGL,AcceleratedVideoDecodeLinuxZeroCopyGL,VaapiOnNvidiaGPUs"
       ;;
    *)

diff --git a/chromium.spec b/chromium.spec
index bf947ff..321b772 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -244,7 +244,7 @@
 %endif
 
 Name:	chromium
-Version: 140.0.7339.127
+Version: 140.0.7339.185
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1707,6 +1707,13 @@ fi
 %endif
 
 %changelog
+* Wed Sep 17 2025 Than Ngo <than@redhat.com> - 140.0.7339.185-1
+- Update to 140.0.7339.185
+  * CVE-2025-10585: Type Confusion in V8
+  * CVE-2025-10500: Use after free in Dawn
+  * CVE-2025-10501: Use after free in WebRTC
+  * CVE-2025-10502: Heap buffer overflow in ANGLE
+
 * Thu Sep 11 2025 Than Ngo <than@redhat.com> - 140.0.7339.127-1
 - Update to 140.0.7339.127
   * CVE-2025-10200: Use after free in Serviceworker

diff --git a/sources b/sources
index 71fc238..e0311ab 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-140.0.7339.127-clean.tar.xz) = 49b339956dab5dd3433287add96a07075ac9bb176fef35524f156fe002ef9b6ccd6ddac1e68df9e61859e3cab4d161bfe43d4fd7136a826537b91148b3a79942
+SHA512 (chromium-140.0.7339.185-clean.tar.xz) = 793030eb1437d11e73fe489f9cec363e44934787e9164949ad8bb6c3f45a31fa42c2a55857e190faf5f8f3c0badc610ed50298231320d0c134304d1196c69885

                 reply	other threads:[~2026-08-07 16:08 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178611889008.1.3951464136196129275.rpms-chromium-d1eb059adc6d@fedoraproject.org \
    --to=than@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox