public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/cef] rawhide: - Update to 151.0.7922.108
@ 2026-09-04 17:42 Than Ngo
0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-09-04 17:42 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/cef
Branch : rawhide
Commit : 8f732d3562e84a74026e534d9f7afaa354724991
Author : Than Ngo <than@redhat.com>
Date : 2026-09-04T17:42:13+00:00
Stats : +17/-2 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/cef/c/8f732d3562e84a74026e534d9f7afaa354724991?branch=rawhide
Log:
- Update to 151.0.7922.108
* CVE-2026-19137: Use after free in WebGL
* CVE-2026-19138: Heap buffer overflow in CrashReporting
* CVE-2026-19139: Race in CredentialProvider
* CVE-2026-19140: Use after free in GPU
* CVE-2026-19141: Use after free in Resources
* CVE-2026-19142: Use after free in Views
* CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
* CVE-2026-19144: Use after free in HTML
* CVE-2026-19145: Use after free in Translate
* CVE-2026-19146: Uninitialized Use in GPU
* CVE-2026-19147: Use after free in Aura
* CVE-2026-19148: Out of bounds write in GPU
* CVE-2026-19149: Use after free in Aura
* CVE-2026-19150: Inappropriate implementation in V8
* CVE-2026-19151: Use after free in V8
* CVE-2026-19152: Inappropriate implementation in Navigation
* CVE-2026-19153: Insufficient validation of untrusted input in Workers
* CVE-2026-19154: Use after free in Skia
* CVE-2026-19155: Use after free in Payments
* CVE-2026-19156: Heap buffer overflow in Base
* CVE-2026-19157: Out of bounds write in ANGLE
* CVE-2026-19158: Use after free in Views
* CVE-2026-19159: Use after free in Views
* CVE-2026-19160: Uninitialized Use in Skia
* CVE-2026-19161: Uninitialized Use in Skia
* CVE-2026-19162: Out of bounds write in V8
* CVE-2026-19163: Use after free in Media
* CVE-2026-19164: Insufficient validation of untrusted input in Codecs
* CVE-2026-19165: Use after free in Extensions
* CVE-2026-19166: Use after free in Web Authentication
* CVE-2026-19167: Integer overflow in GPU
* CVE-2026-19168: Inappropriate implementation in V8
* CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
* CVE-2026-19170: Use after free in WebGL
* CVE-2026-19171: Use after free in Media
* CVE-2026-19172: Use after free in Views
* CVE-2026-19173: Out of bounds write in Skia
* CVE-2026-19174: Integer overflow in V8
* CVE-2026-19175: Use after free in Payments
* CVE-2026-19176: Use after free in Skia
* CVE-2026-19177: Insufficient validation of untrusted input in UI
---
diff --git a/cef.spec b/cef.spec
index d2feb87..584edc3 100644
--- a/cef.spec
+++ b/cef.spec
@@ -247,7 +247,7 @@
%global chromium_major 151
%global chromium_branch 7922
# Where possible, track Chromium versions already released in Fedora.
-%global chromium_minor 71
+%global chromium_minor 108
%global chromium_version %{chromium_major}.0.%{chromium_branch}.%{chromium_minor}
%global cef_commit 3a0fcf1e1b6249b50c96ac77c429bfefade09d96
%global cef_branch %{chromium_branch}
@@ -290,6 +290,9 @@ Patch22: chromium-131-fix-qt-ui.pach
#//chrome/test:captured_sites_interactive_tests(//build/toolchain/linux/unbundle:default)
# needs //third_party/libpng:libpng_for_testonly(//build/toolchain/linux/unbundle:default)
Patch23: chromium-143-revert-libpng_for_testonly.patch
+
+# patch from Melvin - melvin@pixilab.se
+Patch24: glibc-2.42-baud-rate-fix.patch
# disable enterprise_companion_integration_tests due to Unresolved dependencies
Patch31: chromium-145-disable-enterprise_companion_integration_tests.patch
@@ -1054,6 +1057,7 @@ mv %{_builddir}/cef-%{cef_commit} ./cef
%endif
%patch -P23 -p1 -R -b .revert-libpng_for_testonly
+%patch -P24 -p1 -b .glibc-2.42-baud-rate-fix
%patch -P31 -p1 -b .disable-enterprise_companion_integration_tests
%if ! %{bundlebrotli}
diff --git a/glibc-2.42-baud-rate-fix.patch b/glibc-2.42-baud-rate-fix.patch
new file mode 100644
index 0000000..5cf8333
--- /dev/null
+++ b/glibc-2.42-baud-rate-fix.patch
@@ -0,0 +1,11 @@
+--- a/services/device/serial/serial_io_handler_posix.cc 2025-11-09 13:57:16.132379788 +0100
++++ b/services/device/serial/serial_io_handler_posix.cc 2025-11-09 14:07:13.488376598 +0100
+@@ -51,7 +51,7 @@
+ bool BitrateToSpeedConstant(int bitrate, speed_t* speed) {
+ #define BITRATE_TO_SPEED_CASE(x) \
+ case x: \
+- *speed = B##x; \
++ *speed = __B##x; \
+ return true;
+ switch (bitrate) {
+ BITRATE_TO_SPEED_CASE(0)
diff --git a/sources b/sources
index de0cdde..eb1bd87 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
SHA512 (3a0fcf1e1b6249b50c96ac77c429bfefade09d96.tar.gz) = 450ad00c41029796629edebeb7f589ce4f206c8ffcca55dd6900420cca0aabea869e4dd1996bafff3084b5ab14466bf579486c525bd16a49f5e5a62635736972
SHA512 (node-v22.22.0-stripped.tar.gz) = f32a8a73063b3c78cbacf941e11dd529ebcf2618b3ba661966312e49ee9870c43a3acf256e8d331a4b0b621b16a501810c02a3ad763c75884cc250addca8e106
-SHA512 (chromium-151.0.7922.71-clean.tar.xz) = 81ea7343f4fee4fc1a66a7fab47d2d691bbdbbb2db7b903f630fbbcd9cdebc2a0706d8f4831ea7d2dc25c5201a18946f36b0ce11f2e123b30c88f70f26ba929f
+SHA512 (chromium-151.0.7922.108-clean.tar.xz) = 7ba07b2e23e4d579529147584e820e5c48452f45ae212360f957b336649e6ed9a64fadd6269ba3de62a6bf441d4923f67d248c44190efa0566d59c5a8dc05f4e
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-04 17:42 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-04 17:42 [rpms/cef] rawhide: - Update to 151.0.7922.108 Than Ngo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox