public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Than Ngo <than@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/chromium] epel9-next: - Update to 146.0.7680.177
Date: Fri, 07 Aug 2026 16:08:51 GMT [thread overview]
Message-ID: <178611893168.1.15644719280261224292.rpms-chromium-d0205978126f@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/chromium
Branch : epel9-next
Commit : d0205978126ff32fee7da2efeac509282aa7089d
Author : Than Ngo <than@redhat.com>
Date : 2026-04-01T10:52:38+02:00
Stats : +26/-24 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/chromium/c/d0205978126ff32fee7da2efeac509282aa7089d?branch=epel9-next
Log:
- Update to 146.0.7680.177
* High CVE-2026-5273: Use after free in CSS
* High CVE-2026-5272: Heap buffer overflow in GPU
* High CVE-2026-5274: Integer overflow in Codecs
* High CVE-2026-5275: Heap buffer overflow in ANGLE
* High CVE-2026-5276: Insufficient policy enforcement in WebUSB
* High CVE-2026-5277: Integer overflow in ANGLE
* High CVE-2026-5278: Use after free in Web MIDI
* High CVE-2026-5279: Object corruption in V8
* High CVE-2026-5280: Use after free in WebCodecs
* High CVE-2026-5281: Use after free in Dawn
* High CVE-2026-5282: Out of bounds read in WebCodecs
* High CVE-2026-5283: Inappropriate implementation in ANGLE
* High CVE-2026-5284: Use after free in Dawn
* High CVE-2026-5285: Use after free in WebGL
* High CVE-2026-5286: Use after free in Dawn
* High CVE-2026-5287: Use after free in PDF
* High CVE-2026-5288: Use after free in WebView
* High CVE-2026-5289: Use after free in Navigation
* High CVE-2026-5290: Use after free in Compositing
* Medium CVE-2026-5291: Inappropriate implementation in WebGL
* Medium CVE-2026-5292: Out of bounds read in WebCodecs
- removed ppc64le-build-error patch that is merged in upstream
---
diff --git a/chromium-146-ppc64le-build-error.patch b/chromium-146-ppc64le-build-error.patch
deleted file mode 100644
index 9f73d6b..0000000
--- a/chromium-146-ppc64le-build-error.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-Fix build error on ppc64le
-
- error: out-of-line definition of 'ProcessARateVector' does not match any declaration in 'blink::Delay'
-
-diff -up chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc.me chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc
---- chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc.me 2026-03-24 15:38:50.300720592 +0100
-+++ chromium-146.0.7680.164/third_party/blink/renderer/platform/audio/delay.cc 2026-03-24 15:54:07.159563910 +0100
-@@ -102,8 +102,8 @@ double Delay::DelayTime(float sample_rat
- #if !(defined(ARCH_CPU_X86_FAMILY) || defined(CPU_ARM_NEON))
- // Default scalar versions if simd/neon are not available.
- std::tuple<size_t, size_t> Delay::ProcessARateVector(
-- float* destination,
-- uint32_t frames_to_process) const {
-+ base::span<float> destination,
-+ size_t frames_to_process) const {
- // We don't have a vectorized version, so just do nothing and return the 0 to
- // indicate no frames processed and return the current write_index_.
- return std::make_tuple(0, write_index_);
diff --git a/chromium.spec b/chromium.spec
index 4b49274..89829f1 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -262,7 +262,7 @@
%endif
Name: chromium
-Version: 146.0.7680.164
+Version: 146.0.7680.177
Release: 1%{?dist}
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
Url: http://www.chromium.org/Home
@@ -491,9 +491,6 @@ Patch417: 0001-add-xnn-ppc64el-support.patch
Patch418: 0002-regenerate-xnn-buildgn.patch
Patch419: 0009-sandbox-ignore-byte-span-error.patch
-# Fix FTBFS, error: out-of-line definition of 'ProcessARateVector' does not match any declaration in 'blink::Delay'
-Patch420: chromium-146-ppc64le-build-error.patch
-
# flatpak sandbox patches from
# https://github.com/flathub/org.chromium.Chromium/tree/master/patches/chromium
Patch500: flatpak-Add-initial-sandbox-support.patch
@@ -1201,7 +1198,6 @@ Qt6 UI for chromium.
%patch -P417 -p1 -b .0001-add-xnn-ppc64el-support
%patch -P418 -p1 -b .0002-regenerate-xnn-buildgn
%patch -P419 -p1 -b .0009-sandbox-ignore-byte-span-error
-%patch -P420 -p1 -b .fix-ppc64le-build-error
%endif
%if 0%{?flatpak}
@@ -1863,6 +1859,30 @@ fi
%endif
%changelog
+* Wed Apr 01 2026 Than Ngo <than@redhat.com> - 146.0.7680.177-1
+- Update to 146.0.7680.177
+ * High CVE-2026-5273: Use after free in CSS
+ * High CVE-2026-5272: Heap buffer overflow in GPU
+ * High CVE-2026-5274: Integer overflow in Codecs
+ * High CVE-2026-5275: Heap buffer overflow in ANGLE
+ * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
+ * High CVE-2026-5277: Integer overflow in ANGLE
+ * High CVE-2026-5278: Use after free in Web MIDI
+ * High CVE-2026-5279: Object corruption in V8
+ * High CVE-2026-5280: Use after free in WebCodecs
+ * High CVE-2026-5281: Use after free in Dawn
+ * High CVE-2026-5282: Out of bounds read in WebCodecs
+ * High CVE-2026-5283: Inappropriate implementation in ANGLE
+ * High CVE-2026-5284: Use after free in Dawn
+ * High CVE-2026-5285: Use after free in WebGL
+ * High CVE-2026-5286: Use after free in Dawn
+ * High CVE-2026-5287: Use after free in PDF
+ * High CVE-2026-5288: Use after free in WebView
+ * High CVE-2026-5289: Use after free in Navigation
+ * High CVE-2026-5290: Use after free in Compositing
+ * Medium CVE-2026-5291: Inappropriate implementation in WebGL
+ * Medium CVE-2026-5292: Out of bounds read in WebCodecs
+
* Tue Mar 24 2026 Than Ngo <than@redhat.com> - 146.0.7680.164-1
- Update to 146.0.7680.164
* High CVE-2026-4673: Heap buffer overflow in WebAudio
diff --git a/sources b/sources
index 3a665cc..c8198b4 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
SHA512 (rollup-linux-arm64-gnu-4.22.4.tgz) = 01d3d1a0d8b734a54ba2508dfd2a7817837577df1ce120671cc2a82ee886e915e0a19e2c965b1eb868a8b33ba69cf1a63ccd8eeea6805ff20975e0d4f1fdba03
SHA512 (rollup-linux-powerpc64le-gnu-4.22.4.tgz) = dda5422bdc5f596d68190a53b182493c5e9b7e959f85b46785d97285a936662c852c369acb3d043f98fd5754552c003196658a4c37d2f70c91c98de1be13e83a
SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-146.0.7680.164-clean.tar.xz) = 339d5d48a6b1b607bdb0f7af0a0d3b01af064ba2239cb5dd6d92972f3a550769c9737bc62188317b05e517a4717bc3f74d759b1cfe8aba5cdfd58928294d4c1e
+SHA512 (chromium-146.0.7680.177-clean.tar.xz) = f6d365e61c38ff214db2d4daeab302fbf4053253d8b249a22d248d56d7406bab7b60725a21cc0b21fe08970820034951ab857c0b0952549984005eaf53a11b0f
reply other threads:[~2026-08-07 16:08 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178611893168.1.15644719280261224292.rpms-chromium-d0205978126f@fedoraproject.org \
--to=than@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox