public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: - Update to 141.0.7390.65
@ 2026-08-07 16:08 Than Ngo
  0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : epel9-next
            Commit : ea47c56394fd4c3b59177429c42a68300d713951
            Author : Than Ngo <than@redhat.com>
            Date   : 2025-10-08T10:36:28+02:00
            Stats  : +9/-51 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/ea47c56394fd4c3b59177429c42a68300d713951?branch=epel9-next

            Log:
            - Update to 141.0.7390.65
  * High CVE-2025-11458: Heap buffer overflow in Sync
  * High CVE-2025-11460: Use after free in Storage
  * Medium CVE-2025-11211: Out of bounds read in WebCodecs
- remove 0001-Change-use-of-removed-intrinsic.patch as it is included in
  141.0.7390.65

---
diff --git a/0001-Change-use-of-removed-intrinsic.patch b/0001-Change-use-of-removed-intrinsic.patch
deleted file mode 100644
index 82940ff..0000000
--- a/0001-Change-use-of-removed-intrinsic.patch
+++ /dev/null
@@ -1,38 +0,0 @@
-From 135488419331644e59091ecc73e682299d3937a4 Mon Sep 17 00:00:00 2001
-From: Devon Loehr <dloehr@google.com>
-Date: Fri, 15 Aug 2025 14:31:27 +0000
-Subject: [PATCH] Change use of removed intrinsic
-
-A recent LLVM change removed the __builtin_ia32_vcvtph2ps256 intrinsic
-because it can be implemented using __builtin_shufflevector and/or
-__builtin_convertvector. This CL changes skia to use convertvector as
-to match.
-
-Bug: chromium:438445382
-Change-Id: I2ed16cd507d7feeafba4c082b3840cbdd6368dd9
-Reviewed-on: https://skia-review.googlesource.com/c/skcms/+/1038217
-Reviewed-by: Ben Wagner <bungeman@google.com>
-Commit-Queue: Ben Wagner <bungeman@google.com>
-Auto-Submit: Devon Loehr <dloehr@google.com>
----
- third_party/skia/modules/skcms/src/src/Transform_inl.h | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/third_party/skia/modules/skcms/src/Transform_inl.h b/third_party/skia/modules/skcms/src/Transform_inl.h
-index bc10e7d..99faf25 100644
---- a/third_party/skia/modules/skcms/src/Transform_inl.h
-+++ b/third_party/skia/modules/skcms/src/Transform_inl.h
-@@ -156,8 +156,8 @@ SI F F_from_Half(U16 half) {
- #elif defined(USING_AVX512F)
-     return (F)_mm512_cvtph_ps((__m256i)half);
- #elif defined(USING_AVX_F16C)
--    typedef int16_t __attribute__((vector_size(16))) I16;
--    return __builtin_ia32_vcvtph2ps256((I16)half);
-+    typedef _Float16 __attribute__((vector_size(16))) F16;
-+    return __builtin_convertvector((F16)half, F);
- #else
-     U32 wide = cast<U32>(half);
-     // A half is 1-5-10 sign-exponent-mantissa, with 15 exponent bias.
--- 
-2.50.1
-

diff --git a/chromium.spec b/chromium.spec
index 8583f91..e898602 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -244,8 +244,8 @@
 %endif
 
 Name:	chromium
-Version: 141.0.7390.54
-Release: 2%{?dist}
+Version: 141.0.7390.65
+Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
 License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -427,14 +427,6 @@ Patch415: add-ppc64-pthread-stack-size.patch
 Patch417: 0001-add-xnn-ppc64el-support.patch
 Patch418: 0002-regenerate-xnn-buildgn.patch
 
-
-# Fix for building with clang-22
-# This patch comes from:
-# https://skia.googlesource.com/skcms.git/+/135488419331644e59091ecc73e682299d3937a4
-# This was bundled into skia here:
-# https://github.com/google/skia/commit/9ab05b08ae3e83c80ac69c69008ed1048e9a0923
-Patch419: 0001-Change-use-of-removed-intrinsic.patch
-
 # flatpak sandbox patches from
 # https://github.com/flathub/org.chromium.Chromium/tree/master/patches/chromium
 Patch500: flatpak-Add-initial-sandbox-support.patch
@@ -1091,8 +1083,6 @@ Qt6 UI for chromium.
 %patch -P418 -p1 -b .0002-regenerate-xnn-buildgn
 %endif
 
-%patch -P419 -p1 -b .clang-22-fix
-
 %if 0%{?flatpak}
 %patch -P500 -p1 -b .flatpak-initial-sandbox
 %patch -P501 -p1 -b .flatpak-sandbox-paths
@@ -1731,6 +1721,12 @@ fi
 %endif
 
 %changelog
+* Wed Oct 08 2025 Than Ngo <than@redhat.com> - 141.0.7390.65-1
+- Update to 141.0.7390.65
+  * High CVE-2025-11458: Heap buffer overflow in Sync
+  * High CVE-2025-11460: Use after free in Storage
+  * Medium CVE-2025-11211: Out of bounds read in WebCodecs
+
 * Fri Oct 03 2025 Tom Stellard <tstellar@redhat.com> - 141.0.7390.54-2
 - Fix build with clang-22
 

diff --git a/sources b/sources
index af26658..4761d75 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-141.0.7390.54-clean.tar.xz) = 465fb02dec3835f80059e47b5c0cc4efbd84385db53c382f0cf3fa32b02089a9ec95cba7a26053f2b3cfb63f44e6ed9c16463f9384f784362d20ef1703b7ab18
+SHA512 (chromium-141.0.7390.65-clean.tar.xz) = f29a26fab840f942162e6ba347c727da78973595e8fd1067eaeed39434b4cc867d624ac4a2ba417469ca752da1b92e675539e60bf3818f2021726728acbc66df

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-07 16:08 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:08 [rpms/chromium] epel9-next: - Update to 141.0.7390.65 Than Ngo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox