public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: - Update to 141.0.7390.65
@ 2026-08-07 16:08 Than Ngo
0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : ea47c56394fd4c3b59177429c42a68300d713951
Author : Than Ngo <than@redhat.com>
Date : 2025-10-08T10:36:28+02:00
Stats : +9/-51 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/ea47c56394fd4c3b59177429c42a68300d713951?branch=epel9-next
Log:
- Update to 141.0.7390.65
* High CVE-2025-11458: Heap buffer overflow in Sync
* High CVE-2025-11460: Use after free in Storage
* Medium CVE-2025-11211: Out of bounds read in WebCodecs
- remove 0001-Change-use-of-removed-intrinsic.patch as it is included in
141.0.7390.65
---
diff --git a/0001-Change-use-of-removed-intrinsic.patch b/0001-Change-use-of-removed-intrinsic.patch
deleted file mode 100644
index 82940ff..0000000
--- a/0001-Change-use-of-removed-intrinsic.patch
+++ /dev/null
@@ -1,38 +0,0 @@
-From 135488419331644e59091ecc73e682299d3937a4 Mon Sep 17 00:00:00 2001
-From: Devon Loehr <dloehr@google.com>
-Date: Fri, 15 Aug 2025 14:31:27 +0000
-Subject: [PATCH] Change use of removed intrinsic
-
-A recent LLVM change removed the __builtin_ia32_vcvtph2ps256 intrinsic
-because it can be implemented using __builtin_shufflevector and/or
-__builtin_convertvector. This CL changes skia to use convertvector as
-to match.
-
-Bug: chromium:438445382
-Change-Id: I2ed16cd507d7feeafba4c082b3840cbdd6368dd9
-Reviewed-on: https://skia-review.googlesource.com/c/skcms/+/1038217
-Reviewed-by: Ben Wagner <bungeman@google.com>
-Commit-Queue: Ben Wagner <bungeman@google.com>
-Auto-Submit: Devon Loehr <dloehr@google.com>
----
- third_party/skia/modules/skcms/src/src/Transform_inl.h | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/third_party/skia/modules/skcms/src/Transform_inl.h b/third_party/skia/modules/skcms/src/Transform_inl.h
-index bc10e7d..99faf25 100644
---- a/third_party/skia/modules/skcms/src/Transform_inl.h
-+++ b/third_party/skia/modules/skcms/src/Transform_inl.h
-@@ -156,8 +156,8 @@ SI F F_from_Half(U16 half) {
- #elif defined(USING_AVX512F)
- return (F)_mm512_cvtph_ps((__m256i)half);
- #elif defined(USING_AVX_F16C)
-- typedef int16_t __attribute__((vector_size(16))) I16;
-- return __builtin_ia32_vcvtph2ps256((I16)half);
-+ typedef _Float16 __attribute__((vector_size(16))) F16;
-+ return __builtin_convertvector((F16)half, F);
- #else
- U32 wide = cast<U32>(half);
- // A half is 1-5-10 sign-exponent-mantissa, with 15 exponent bias.
---
-2.50.1
-
diff --git a/chromium.spec b/chromium.spec
index 8583f91..e898602 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -244,8 +244,8 @@
%endif
Name: chromium
-Version: 141.0.7390.54
-Release: 2%{?dist}
+Version: 141.0.7390.65
+Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -427,14 +427,6 @@ Patch415: add-ppc64-pthread-stack-size.patch
Patch417: 0001-add-xnn-ppc64el-support.patch
Patch418: 0002-regenerate-xnn-buildgn.patch
-
-# Fix for building with clang-22
-# This patch comes from:
-# https://skia.googlesource.com/skcms.git/+/135488419331644e59091ecc73e682299d3937a4
-# This was bundled into skia here:
-# https://github.com/google/skia/commit/9ab05b08ae3e83c80ac69c69008ed1048e9a0923
-Patch419: 0001-Change-use-of-removed-intrinsic.patch
-
# flatpak sandbox patches from
# https://github.com/flathub/org.chromium.Chromium/tree/master/patches/chromium
Patch500: flatpak-Add-initial-sandbox-support.patch
@@ -1091,8 +1083,6 @@ Qt6 UI for chromium.
%patch -P418 -p1 -b .0002-regenerate-xnn-buildgn
%endif
-%patch -P419 -p1 -b .clang-22-fix
-
%if 0%{?flatpak}
%patch -P500 -p1 -b .flatpak-initial-sandbox
%patch -P501 -p1 -b .flatpak-sandbox-paths
@@ -1731,6 +1721,12 @@ fi
%endif
%changelog
+* Wed Oct 08 2025 Than Ngo <than@redhat.com> - 141.0.7390.65-1
+- Update to 141.0.7390.65
+ * High CVE-2025-11458: Heap buffer overflow in Sync
+ * High CVE-2025-11460: Use after free in Storage
+ * Medium CVE-2025-11211: Out of bounds read in WebCodecs
+
* Fri Oct 03 2025 Tom Stellard <tstellar@redhat.com> - 141.0.7390.54-2
- Fix build with clang-22
diff --git a/sources b/sources
index af26658..4761d75 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-141.0.7390.54-clean.tar.xz) = 465fb02dec3835f80059e47b5c0cc4efbd84385db53c382f0cf3fa32b02089a9ec95cba7a26053f2b3cfb63f44e6ed9c16463f9384f784362d20ef1703b7ab18
+SHA512 (chromium-141.0.7390.65-clean.tar.xz) = f29a26fab840f942162e6ba347c727da78973595e8fd1067eaeed39434b4cc867d624ac4a2ba417469ca752da1b92e675539e60bf3818f2021726728acbc66df
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-07 16:08 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:08 [rpms/chromium] epel9-next: - Update to 141.0.7390.65 Than Ngo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox