Djam/chromium-browser-stable-test
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/chromium-browser-stable-test.git synced 2025-02-23 17:42:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
chromium-browser-stable-test/chromium-browser-stable.spec

722 lines
32 KiB
RPMSpec
Raw Normal View History

update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%define revision 145807
initial import
2012-07-04 11:57:27 +04:00
%define crname chromium-browser
%define _crdir %{_libdir}/%{crname}
%define _src %{_topdir}/SOURCES
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%define basever 20.0.1132.43
%define patchver() ([ -f %{_src}/patch-%1-%2.diff.xz ] || exit 1; xz -dc %{_src}/patch-%1-%2.diff.xz|patch -p1);
initial import
2012-07-04 11:57:27 +04:00
Name: chromium-browser-stable
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
Version: 20.0.1132.57
read prefs from another place
2012-07-24 16:01:58 +04:00
Release: %mkrel 4
initial import
2012-07-04 11:57:27 +04:00
Summary: A fast webkit-based web browser
Group: Networking/WWW
License: BSD, LGPL
Source0: chromium-%{basever}.tar.xz
Source1: chromium-wrapper
Source2: chromium-browser.desktop
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
Patch0: chromium-19.0.1077.3-remove-inline.patch
Patch1: chromium-20.0.1132.43-svnversion.patch
apply memory leak and gcc 4.7 patches
2012-07-24 13:40:43 +04:00
Patch2: chromium-20.0.1132.43-fix-includes.patch
Patch3: sqlite-3.7.6.3-fix-out-of-scope-memory-reference.patch
read preferenses from file
2012-07-24 15:43:24 +04:00
Patch4: chromium-20.0.1132.47-master-prefs-path.patch
read prefs from another place
2012-07-24 16:01:58 +04:00
Source30: master_preferences
Source31: default_bookmarks.html
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
Source1000: patch-20.0.1132.43-20.0.1132.47.diff.xz
Source1001: patch-20.0.1132.47-20.0.1132.57.diff.xz
#Source1001: binary-19.0.1077.3-19.0.1081.2.tar.xz
#Source1002: script-19.0.1077.3-19.0.1081.2.sh
Provides: %{crname}
Conflicts: chromium-browser-unstable
Conflicts: chromium-browser-beta
Obsoletes: chromium-browser < 1:9.0.597.94
initial import
2012-07-04 11:57:27 +04:00
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot
BuildRequires: bison, flex, gtk2-devel, atk-devel, libexpat-devel, gperf
added BR: util-linux
2012-07-25 15:00:26 +04:00
BuildRequires: nspr-devel, nss-devel, libalsa-devel, util-linux
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
BuildRequires: glib2-devel, bzip2-devel, zlib-devel, png-devel
BuildRequires: jpeg-devel, mesagl-devel, mesaglu-devel
BuildRequires: libxscrnsaver-devel, dbus-glib-devel, cups-devel
initial import
2012-07-04 11:57:27 +04:00
BuildRequires: libgnome-keyring-devel libvpx-devel libxtst-devel
BuildRequires: libxslt-devel libxml2-devel libxt-devel pam-devel
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
BuildRequires: libevent-devel libflac-devel pulseaudio-devel
BuildRequires: elfutils-devel udev-devel speex-devel yasm
initial import
2012-07-04 11:57:27 +04:00
ExclusiveArch: i586 x86_64 armv7l
%description
Chromium is a browser that combines a minimal design with sophisticated
technology to make the web faster, safer, and easier.
This is the stable channel Chromium browser. It offers a rock solid
browser which is updated with features and fixes once they have been
thoroughly tested. If you want the latest features, install the
chromium-browser-unstable package instead.
Note: If you are reverting from unstable to stable or beta channel, you may
experience tab crashes on startup. This crash only affects tabs restored
during the first launch due to a change in how tab state is stored.
See http://bugs.chromium.org/34688. It's always a good idea to back up
your profile before changing channels.
%package -n chromium-browser
Summary: A fast webkit-based web browser (transition package)
Epoch: 1
Group: Networking/WWW
Requires: %{name} = %{version}-%{release}
%description -n chromium-browser
Chromium is a browser that combines a minimal design with sophisticated
technology to make the web faster, safer, and easier.
This is a transition package that installs the stable channel Chromium
browser. If you prefer the dev channel browser, install the
chromium-browser-unstable package instead.
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
initial import
2012-07-04 11:57:27 +04:00
%prep
%setup -q -n chromium-%{basever}
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%patch0 -p1 -b .remove-inline
%patch1 -p1 -b .svnversion
read prefs from another place
2012-07-24 16:01:58 +04:00
#%if %mdvver >= 2012.1
apply memory leak and gcc 4.7 patches
2012-07-24 13:40:43 +04:00
%patch2 -p0 -b .includes
%patch3 -p1 -b .fix-out-of-scope-memory-reference
read prefs from another place
2012-07-24 16:01:58 +04:00
#%endif
%patch4 -p1 -b .prefs
initial import
2012-07-04 11:57:27 +04:00
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%patchver 20.0.1132.43 20.0.1132.47
%patchver 20.0.1132.47 20.0.1132.57
#tar xvf %{_src}/binary-19.0.1077.3-19.0.1081.2.tar.xz
#sh -x %{_src}/script-19.0.1077.3-19.0.1081.2.sh
initial import
2012-07-04 11:57:27 +04:00
echo "%{revision}" > build/LASTCHANGE.in
# Hard code extra version
FILE=chrome/common/chrome_version_info_posix.cc
sed -i.orig -e 's/getenv("CHROME_VERSION_EXTRA")/"%{product_vendor} %{product_version}"/' $FILE
cmp $FILE $FILE.orig && exit 1
%build
export GYP_GENERATORS=make
build/gyp_chromium --depth=. \
-D linux_sandbox_path=%{_crdir}/chrome-sandbox \
-D linux_sandbox_chrome_path=%{_crdir}/chrome \
-D linux_link_gnome_keyring=0 \
-D use_gconf=0 \
-D werror='' \
-D use_system_sqlite=0 \
-D use_system_libxml=1 \
-D use_system_zlib=1 \
-D use_system_bzip2=1 \
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
-D use_system_xdg_utils=1 \
-D use_system_yasm=1 \
initial import
2012-07-04 11:57:27 +04:00
-D use_system_libpng=1 \
-D use_system_libjpeg=1 \
-D use_system_libevent=1 \
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
-D use_system_speex=1 \
-D use_system_flac=1 \
initial import
2012-07-04 11:57:27 +04:00
-D use_system_vpx=0 \
-D use_system_icu=0 \
%ifarch i586
-D disable_sse2=1 \
-D release_extra_cflags="-march=i586"
%endif
%ifarch armv7l
-D target_arch=arm \
-D disable_nacl=1 \
-D linux_use_tcmalloc=0 \
-D armv7=1 \
-D release_extra_cflags="-marm"
%endif
# Note: DON'T use system sqlite (3.7.3) -- it breaks history search
%make chrome chrome_sandbox BUILDTYPE=Release
%install
rm -rf %{buildroot}
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{_crdir}/locales
mkdir -p %{buildroot}%{_crdir}/themes
mkdir -p %{buildroot}%{_crdir}/default_apps
mkdir -p %{buildroot}%{_mandir}/man1
install -m 755 %{_src}/chromium-wrapper %{buildroot}%{_crdir}/
install -m 755 out/Release/chrome %{buildroot}%{_crdir}/
install -m 4755 out/Release/chrome_sandbox %{buildroot}%{_crdir}/chrome-sandbox
install -m 644 out/Release/chrome.1 %{buildroot}%{_mandir}/man1/%{crname}.1
install -m 644 out/Release/chrome.pak %{buildroot}%{_crdir}/
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
install -m 644 out/Release/ui_resources_standard.pak %{buildroot}%{_crdir}/
install -m 644 out/Release/theme_resources_standard.pak %{buildroot}%{_crdir}/
initial import
2012-07-04 11:57:27 +04:00
install -m 755 out/Release/libffmpegsumo.so %{buildroot}%{_crdir}/
%ifnarch armv7l
install -m 755 out/Release/libppGoogleNaClPluginChrome.so %{buildroot}%{_crdir}/
install -m 755 out/Release/nacl_helper_bootstrap %{buildroot}%{_crdir}/
install -m 755 out/Release/nacl_helper %{buildroot}%{_crdir}/
install -m 644 out/Release/nacl_irt_*.nexe %{buildroot}%{_crdir}/
%endif
install -m 644 out/Release/locales/*.pak %{buildroot}%{_crdir}/locales/
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
#install -m 755 out/Release/xdg-mime %{buildroot}%{_crdir}/
#install -m 755 out/Release/xdg-settings %{buildroot}%{_crdir}/
initial import
2012-07-04 11:57:27 +04:00
install -m 644 out/Release/resources.pak %{buildroot}%{_crdir}/
install -m 644 chrome/browser/resources/default_apps/* %{buildroot}%{_crdir}/default_apps/
ln -s %{_crdir}/chromium-wrapper %{buildroot}%{_bindir}/%{crname}
find out/Release/resources/ -name "*.d" -exec rm {} \;
cp -r out/Release/resources %{buildroot}%{_crdir}
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
# Strip NaCl IRT
%ifarch x86_64
./native_client/toolchain/linux_x86_newlib/bin/x86_64-nacl-strip %{buildroot}%{_crdir}/nacl_irt_x86_64.nexe
%endif
%ifarch i586
./native_client/toolchain/linux_x86_newlib/bin/i686-nacl-strip %{buildroot}%{_crdir}/nacl_irt_x86_32.nexe
%endif
initial import
2012-07-04 11:57:27 +04:00
# desktop file
mkdir -p %{buildroot}%{_datadir}/applications
install -m 644 %{_src}/%{crname}.desktop %{buildroot}%{_datadir}/applications/
# icon
for i in 16 22 24 26 32 48 64 128 256; do
mkdir -p %{buildroot}%{_iconsdir}/hicolor/${i}x${i}/apps
install -m 644 chrome/app/theme/chromium/product_logo_$i.png \
%{buildroot}%{_iconsdir}/hicolor/${i}x${i}/apps/%{crname}.png
done
read prefs from another place
2012-07-24 16:01:58 +04:00
mkdir -p %{buildroot}%{_sysconfdir}/%{crname}
install -m 0644 %{SOURCE30} %{buildroot}%{_sysconfdir}/%{crname}/
install -m 0644 %{SOURCE31} %{buildroot}%{_sysconfdir}/%{crname}/
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%clean
rm -rf %{buildroot}
Updated chromium-browser-stable.spec
2012-07-16 09:00:55 +00:00
%files -n chromium-browser
initial import
2012-07-04 11:57:27 +04:00
%files
%defattr(-,root,root,-)
read prefs from another place
2012-07-24 16:01:58 +04:00
%config %{_sysconfdir}/%{crname}
initial import
2012-07-04 11:57:27 +04:00
%{_bindir}/%{crname}
%{_crdir}/chromium-wrapper
%{_crdir}/chrome
%{_crdir}/chrome-sandbox
%{_crdir}/chrome.pak
%{_crdir}/libffmpegsumo.so
%ifnarch armv7l
%{_crdir}/libppGoogleNaClPluginChrome.so
%{_crdir}/nacl_helper_bootstrap
%{_crdir}/nacl_helper
%{_crdir}/nacl_irt_*.nexe
%endif
%{_crdir}/locales
%{_crdir}/resources.pak
%{_crdir}/resources
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
%{_crdir}/ui_resources_standard.pak
%{_crdir}/theme_resources_standard.pak
initial import
2012-07-04 11:57:27 +04:00
%{_crdir}/themes
%{_crdir}/default_apps
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
#%{_crdir}/xdg-mime
#%{_crdir}/xdg-settings
initial import
2012-07-04 11:57:27 +04:00
%{_mandir}/man1/%{crname}*
%{_datadir}/applications/*.desktop
%{_iconsdir}/hicolor/*/apps/%{crname}.png
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
initial import
2012-07-04 11:57:27 +04:00
%changelog
read prefs from another place
2012-07-24 16:01:58 +04:00
* Tue Jul 24 2012 Arkady L. Shane <arkady.shane@rosalab.ru> 20.0.1132.57-4
- apply new preferences
apply memory leak and gcc 4.7 patches
2012-07-24 13:40:43 +04:00
* Tue Jul 24 2012 Arkady L. Shane <arkady.shane@rosalab.ru> 20.0.1132.57-3
- apply patch to build on gcc 4.7
- apply memory leak sqlite patch
update to 20.0.1132.57
2012-07-24 13:18:14 +04:00
* Fri Jul 13 2012 Claudio Matsuoka <claudio@mandriva.com> 20.0.1132.57-2mdv2011.0
+ Revision: 809196
- add missing standard theme resources
* Thu Jul 12 2012 Claudio Matsuoka <claudio@mandriva.com> 20.0.1132.57-1
+ Revision: 809041
- new upstream release 20.0.1132.57 (145807)
* [129898] High CVE-2012-2842: Use-after-free in counter handling
* [130595] High CVE-2012-2843: Use-after-free in layout height tracking
* [133450] High CVE-2012-2844: Bad object access with JavaScript in PDF
- use system yasm, flac and speex
* Wed Jul 04 2012 Claudio Matsuoka <claudio@mandriva.com> 20.0.1132.47-2
+ Revision: 808143
- new upstream release 20.0.1132.47 (144678)
* Tue Jul 03 2012 Claudio Matsuoka <claudio@mandriva.com> 20.0.1132.47-1
+ Revision: 807999
- new upstream release 20.0.1132.43 (135598)
* [118633] Low CVE-2012-2815: Leak of iframe fragment id.
* [120222] High CVE-2012-2817: Use-after-free in table section handling.
* [120944] High CVE-2012-2818: Use-after-free in counter layout.
* [120977] High CVE-2012-2819: Crash in texture handling.
* [121926] Medium CVE-2012-2820: Out-of-bounds read in SVG filter handling.
* [122925] Medium CVE-2012-2821: Autofill display problem.
* [various] Medium CVE-2012-2822: Misc. lower severity OOB read issues in PDF.
* [124356] High CVE-2012-2823: Use-after-free in SVG resource handling.
* [125374] High CVE-2012-2824: Use-after-free in SVG painting.
* [128688] Medium CVE-2012-2826: Out-of-bounds read in texture conversion.
* [129857] High CVE-2012-2828: Integer overflows in PDF.
* [129947] High CVE-2012-2829: Use-after-free in first-letter handling.
* [129951] High CVE-2012-2830: Wild pointer in array value setting.
* [130356] High CVE-2012-2831: Use-after-free in SVG reference handling.
* [131553] High CVE-2012-2832: Uninitialized pointer in PDF image codec.
* [132156] High CVE-2012-2833: Buffer overflow in PDF JS API.
* [132779] High CVE-2012-2834: Integer overflow in Matroska container.
* [127417] Medium CVE-2012-2825: Wild read in XSL handling.
* [64-bit Linux only] [129930] High CVE-2012-2807: Integer overflows in
libxml.
* Wed Jun 20 2012 Claudio Matsuoka <claudio@mandriva.com> 19.0.1084.56-1
+ Revision: 806474
- new upstream release 19.0.1084.56 (140965)
- use system xdg utils
- strip debug from NaCl IRT files
- new upstream release 19.0.1084.52 (138391)
- new upstream release 19.0.1084.41 (134854)
- move chromium 19 from beta to stable
- remove chromium 18
- fix pulseaudio-devel dependency package name
- requires libudev devel
- new upstream release 18.0.1025.168 (134367)
* [106413] High CVE-2011-3078: Use after free in floats handling
* [117110] High CVE-2012-1521: Use after free in xml parser
* [117627] Medium CVE-2011-3079: IPC validation failure
* [121726] Medium CVE-2011-3080: Race condition in sandbox IPC
* [121899] High CVE-2011-3081: Use after free in floats handling
- new upstream release 18.0.1025.162 (131933)
- new upstream release 18.0.1025.151 (130497)
* fix black screen on Hybrid Graphics system with GPU accelerated
compositing enabled (Issue: 117371)
* fix CSS not applied to <content> element (Issue: 114667)
* fix Regression rendering a div with background gradient and borders
(Issue: 113726)
* fix Canvas 2D line drawing bug with GPU acceleration (Issue: 121285)
* fix Multiple crashes (Issues: 72235, 116825 and 92998)
* fix Pop-up dialog is at wrong position (Issue: 116045)
* fix HTML Canvas patterns are broken if you change the transformation
matrix (Issue: 112165)
* fix SSL interstitial error "proceed anyway" / "back to safety" buttons
don't work (Issue: 119252)
* [106577] Medium CVE-2011-3066: Out-of-bounds read in Skia clipping
* [117583] Medium CVE-2011-3067: Cross-origin iframe replacement
* [117698] High CVE-2011-3068: Use-after-free in run-in handling
* [117728] High CVE-2011-3069: Use-after-free in line box handling
* [118185] High CVE-2011-3070: Use-after-free in v8 bindings
* [118273] High CVE-2011-3071: Use-after-free in HTMLMediaElement
* [118467] Low CVE-2011-3072: Cross-origin violation parenting pop-up window
* [118593] High CVE-2011-3073: Use-after-free in SVG resource handling
* [119281] Medium CVE-2011-3074: Use-after-free in media handling
* [119525] High CVE-2011-3075: Use-after-free applying style command
* [120037] High CVE-2011-3076: Use-after-free in focus handling
* [120189] Medium CVE-2011-3077: Read-after-free in script bindings
- new upstream release 18.0.1025.142
* [109574] Medium CVE-2011-3058: Bad interaction possibly leading to XSS
in EUC-JP
* [112317] Medium CVE-2011-3059: Out-of-bounds read in SVG text handling
* [114056] Medium CVE-2011-3060: Out-of-bounds read in text fragment handling
* [116398] Medium CVE-2011-3061: SPDY proxy certificate checking error
* [116524] High CVE-2011-3062: Off-by-one in OpenType Sanitizer
* [117417] Low CVE-2011-3063: Validate navigation requests from the renderer
more carefully
* [117471] High CVE-2011-3064: Use-after-free in SVG clipping
* [117588] High CVE-2011-3065: Memory corruption in Skia
* [117794] Medium CVE-2011-3057: Invalid read in v8
- new upstream release 18.0.1025.113
- move chromium 18 from beta to stable
- remove chromium 17
- new upstream release 17.0.963.65 (124586)
- move chromium 17 from beta to stable
* Thu Jan 26 2012 Claudio Matsuoka <claudio@mandriva.com> 16.0.912.77-1
+ Revision: 769167
- fix required package names
- new upstream release 16.0.912.77 (118311)
* [106484] High CVE-2011-3924: Use-after-free in DOM selections
* [107182] Critical CVE-2011-3925: Use-after-free in Safe Browsing navigation
* [108461] High CVE-2011-3928: Use-after-free in DOM handling
* [108605] High CVE-2011-3927: Uninitialized value in Skia
* [109556] High CVE-2011-3926: Heap-buffer-overflow in tree builder
* Fri Jan 06 2012 Claudio Matsuoka <claudio@mandriva.com> 16.0.912.75-1
+ Revision: 758280
- new upstream release 16.0.912.75 (116452)
* [106672] High CVE-2011-3921: Use-after-free in animation frames.
* [107128] High CVE-2011-3919: Heap-buffer-overflow in libxml.
* [108006] High CVE-2011-3922: Stack-buffer-overflow in glyph handling.
- detailed changelog: http://goo.gl/n2A6J
* Wed Dec 14 2011 Claudio Matsuoka <claudio@mandriva.com> 16.0.912.63-1
+ Revision: 741173
- fix libxt-devel package name in requires
- fix cups-devel package name in requires
- new upstream release 16.0.912.63 (113337)
- security fixes
* [81753] Medium CVE-2011-3903: Out-of-bounds read in regex matching.
* [95465] Low CVE-2011-3905: Out-of-bounds reads in libxml.
* [98809] Medium CVE-2011-3906: Out-of-bounds read in PDF parser.
* [99016] High CVE-2011-3907: URL bar spoofing with view-source.
* [100863] Low CVE-2011-3908: Out-of-bounds read in SVG parsing.
* [101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in CSS
property array.
* [101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video frame
handling.
* [101779] Medium CVE-2011-3911: Out-of-bounds read in PDF.
* [102359] High CVE-2011-3912: Use-after-free in SVG filters.
* [103921] High CVE-2011-3913: Use-after-free in Range handling.
* [104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n handling.
* [104529] High CVE-2011-3915: Buffer overflow in PDF font handling.
* [104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross references.
* [105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher.
* [107258] High CVE-2011-3904: Use-after-free in bidi handling.
- move chromium 16 to stable
- fix elfutils-devel package name in requires
* Sat Nov 12 2011 Claudio Matsuoka <claudio@mandriva.com> 15.0.874.120-1
+ Revision: 730285
- only include glib.h directly
* Wed Oct 26 2011 Claudio Matsuoka <claudio@mandriva.com> 15.0.874.106-1
+ Revision: 707420
- new upstream release 15.0.874.106 (107270)
* fixes login issues to Barrons Online and The Wall Street Journal
* Tue Oct 25 2011 Claudio Matsuoka <claudio@mandriva.com> 15.0.874.102-1
+ Revision: 707191
- new upstream release 15.0.874.102 (106587)
* [86758] High CVE-2011-2845: URL bar spoof in history handling.
* [88949] Medium CVE-2011-3875: URL bar spoof with drag+drop of URLs.
* [90217] Low CVE-2011-3876: Avoid stripping whitespace at the end of
download filenames.
* [91218] Low CVE-2011-3877: XSS in appcache internals page.
* [94487] Medium CVE-2011-3878: Race condition in worker process
initialization.
* [95374] Low CVE-2011-3879: Avoid redirect to chrome scheme URIs.
* [95992] Low CVE-2011-3880: Don't permit as a HTTP header delimiter.
* [96047][96885][98053][99512][99750] High CVE-2011-3881: Cross-origin
policy violations.
* [96292] High CVE-2011-3882: Use-after-free in media buffer handling.
* [96902] High CVE-2011-3883: Use-after-free in counter handling.
* [97148] High CVE-2011-3884: Timing issues in DOM traversal.
* [97599][98064][98556][99294][99880][100059] High CVE-2011-3885: Stale
style bugs leading to use-after-free.
* [98773][99167] High CVE-2011-3886: Out of bounds writes in v8.
* [98407] Medium CVE-2011-3887: Cookie theft with javascript URIs.
* [99138] High CVE-2011-3888: Use-after-free with plug-in and editing.
* [99211] High CVE-2011-3889: Heap overflow in Web Audio.
* [99553] High CVE-2011-3890: Use-after-free in video source handling.
* [100332] High CVE-2011-3891: Exposure of internal v8 functions.
- move Chromium 15 from beta to stable
- remove Chromium 14
- add support to armv7l
- new upstream release 14.0.835.202 (103287)
- security fixes:
* [93788] High CVE-2011-2876: Use-after-free in text line box handling
* [95072] High CVE-2011-2877: Stale font in SVG text handling
* [95671] High CVE-2011-2878: Inappropriate cross-origin access to the
window prototype
* [96150] High CVE-2011-2879: Lifetime and threading issues in audio node
handling
* [97451] [97520] [97615] High CVE-2011-2880: Use-after-free in the v8
bindings
* [97784] High CVE-2011-2881: Memory corruption with v8 hidden objects
* [98089] Critical CVE-2011-3873: Memory corruption in shader translator
- detailed changelog at http://goo.gl/4dBM1
- new upstream release 14.0.835.186 (101821)
* Sat Sep 17 2011 Claudio Matsuoka <claudio@mandriva.com> 14.0.835.163-1
+ Revision: 700172
- new upstream release 14.0.835.163 (101024)
- security fixes:
* [49377] High CVE-2011-2835: Race condition in the certificate cache
* [57908] Low CVE-2011-2837: Use PIC / pie compiler flags
* [75070] Low CVE-2011-2838: Treat MIME type more authoritatively when
loading plug-ins
* [76771] High CVE-2011-2839: Crash in v8 script object wrappers
* [78427] [83031] Low CVE-2011-2840: Possible URL bar spoofs with unusual
user interaction
* [78639] High CVE-2011-2841: Garbage collection error in PDF
* [82438] Medium CVE-2011-2843: Out-of-bounds read with media buffers
* [85041] Medium CVE-2011-2844: Out-of-bounds read with mp3 files
* [$1000] [89219] High CVE-2011-2846: Use-after-free in unload event handling
* [$1000] [89330] High CVE-2011-2847: Use-after-free in document loader
* [89564] Medium CVE-2011-2848: URL bar spoof with forward button
* [89795] Low CVE-2011-2849: Browser NULL pointer crash with WebSockets
* [89991] Medium CVE-2011-3234: Out-of-bounds read in box handling
* [90134] Medium CVE-2011-2850: Out-of-bounds read with Khmer characters
* [90173] Medium CVE-2011-2851: Out-of-bounds read in video handling
* [91120] High CVE-2011-2852: Off-by-one in v8
* [91197] High CVE-2011-2853: Use-after-free in plug-in handling
* [92651] [94800] High CVE-2011-2854: Use-after-free in ruby / table style
handing
* [92959] High CVE-2011-2855: Stale node in stylesheet handling
* [93416] High CVE-2011-2856: Cross-origin bypass in v8
* [93420] High CVE-2011-2857: Use-after-free in focus controller
* [93472] High CVE-2011-2834: Double free in libxml XPath handling
* [93497] Medium CVE-2011-2859: Incorrect permissions assigned to
non-gallery pages
* [93587] High CVE-2011-2860: Use-after-free in table style handling
* [93596] Medium CVE-2011-2861: Bad string read in PDF
* [93906] High CVE-2011-2862: Unintended access to v8 built-in objects
* [95563] Medium CVE-2011-2864: Out-of-bounds read with Tibetan characters
* [95625] Medium CVE-2011-2858: Out-of-bounds read with triangle arrays
* [95917] Low CVE-2011-2874: Failure to pin a self-signed cert for a session
* [95920] High CVE-2011-2875: Type confusion in v8 object sealing
- detailed changelog at http://goo.gl/6B1kT
- copy release 14.0.835.163 from beta to stable
* Sun Sep 04 2011 Claudio Matsuoka <claudio@mandriva.com> 13.0.782.220-1
+ Revision: 698257
- new upstream release 13.0.782.220 (99552)
* revoking trust for SSL certificates issued by DigiNotar-controlled
intermediate CAs used by the Dutch PKIoverheid program
* Tue Aug 23 2011 Claudio Matsuoka <claudio@mandriva.com> 13.0.782.215-1
+ Revision: 696339
- add fix for tcmalloc build in cooker
- new upstream release 13.0.782.215 (97094)
- security fixes:
* [82552] High CVE-2011-2823: Use-after-free in line box handling
* [88216] High CVE-2011-2824: Use-after-free with counter nodes
* [88670] High CVE-2011-2825: Use-after-free with custom fonts
* [89402] High CVE-2011-2821: Double free in libxml XPath handling
* [87453] High CVE-2011-2826: Cross-origin violation with empty origins
* [90668] High CVE-2011-2827: Use-after-free in text searching
* [91517] High CVE-2011-2828: Out-of-bounds write in v8
* [32-bit only] [91598] High CVE-2011-2829: Integer overflow in uniform
arrays
- detailed changelog at http://goo.gl/Lzn1m
- new upstream release 13.0.782.112 (95650)
- move release 13.0.782.107 (94237) from beta to stable
- security fixes:
* [78841] High CVE-2011-2359: Stale pointer due to bad line box tracking
in rendering.
* [79266] Low CVE-2011-2360: Potential bypass of dangerous file prompt.
* [79426] Low CVE-2011-2361: Improve designation of strings in the basic
auth dialog.
* [81307] Medium CVE-2011-2782: File permissions error with drag and drop.
* [83273] Medium CVE-2011-2783: Always confirm a developer mode NPAPI
extension install via a browser dialog.
* [83841] Low CVE-2011-2784: Local file path disclosure via GL program log.
* [84402] Low CVE-2011-2785: Sanitize the homepage URL in extensions.
* [84600] Low CVE-2011-2786: Make sure the speech input bubble is always
on-screen.
* [84805] Medium CVE-2011-2787: Browser crash due to GPU lock re-entrancy
issue.
* [85559] Low CVE-2011-2788: Buffer overflow in inspector serialization.
* [85808] Medium CVE-2011-2789: Use after free in Pepper plug-in
instantiation.
* [86502] High CVE-2011-2790: Use-after-free with floating styles.
* [86900] High CVE-2011-2791: Out-of-bounds write in ICU.
* [87148] High CVE-2011-2792: Use-after-free with float removal.
* [87227] High CVE-2011-2793: Use-after-free in media selectors.
* [87298] Medium CVE-2011-2794: Out-of-bounds read in text iteration.
* [87339] Medium CVE-2011-2795: Cross-frame function leak.
* [87548] High CVE-2011-2796: Use-after-free in Skia.
* [87729] High CVE-2011-2797: Use-after-free in resource caching.
* [87815] Low CVE-2011-2798: Prevent a couple of internal schemes from
being web accessible.
* [87925] High CVE-2011-2799: Use-after-free in HTML range handling.
* [88337] Medium CVE-2011-2800: Leak of client-side redirect target.
* [88591] High CVE-2011-2802: v8 crash with const lookups.
* [88827] Medium CVE-2011-2803: Out-of-bounds read in Skia paths.
* [88846] High CVE-2011-2801: Use-after-free in frame loader.
* [88889] High CVE-2011-2818: Use-after-free in display box rendering.
* [89142] High CVE-2011-2804: PDF crash with nested functions.
* [89520] High CVE-2011-2805: Cross-origin script injection.
* [90222] High CVE-2011-2819: Cross-origin violation in base URI handling.
- detailed changelog at http://goo.gl/25VH4
* Fri Jul 29 2011 Claudio Matsuoka <claudio@mandriva.com> 12.0.742.124-1
+ Revision: 692282
- new upstream release 112-12.0.742.124 (92024)
* Tue Jun 28 2011 Claudio Matsuoka <claudio@mandriva.com> 12.0.742.112-1
+ Revision: 687931
- new upstream release 12.0.742.112 (90785)
- security fixes:
* [77493] Medium CVE-2011-2345: Out-of-bounds read in NPAPI string handling.
* [84355] High CVE-2011-2346: Use-after-free in SVG font handling.
* [85003] High CVE-2011-2347: Memory corruption in CSS parsing.
* [85102] High CVE-2011-2350: Lifetime and re-entrancy issues in the HTML
parser.
* [85177] High CVE-2011-2348: Bad bounds check in v8.
* [85211] High CVE-2011-2351: Use-after-free with SVG use element.
* [85418] High CVE-2011-2349: Use-after-free in text selection.
- detailed changelog at http://goo.gl/PPBY4
* Tue Jun 07 2011 Claudio Matsuoka <claudio@mandriva.com> 12.0.742.91-1
+ Revision: 683117
- new upstream release 12.0.742.91 (stable)
* Hardware accelerated 3D CSS
* New Safe Browsing protection against downloading malicious files
* Ability to delete Flash cookies from inside Chrome
* Launch Apps by name from the Omnibox
* Integrated Sync into new settings pages
* Improved screen reader support
* New warning when hitting Command-Q on Mac
* Removal of Google Gears
- security fixes
* [73962] [79746] High CVE-2011-1808: Use-after-free due to integer issues
in float handling
* [75496] Medium CVE-2011-1809: Use-after-free in accessibility support
* [75643] Low CVE-2011-1810: Visit history information leak in CSS
* [76034] Low CVE-2011-1811: Browser crash with lots of form submissions
* [77026] Medium CVE-2011-1812: Extensions permission bypass
* [78516] High CVE-2011-1813: Stale pointer in extension framework
* [79362] Medium CVE-2011-1814: Read from uninitialized pointer
* [79862] Low CVE-2011-1815: Extension script injection into new tab page
* [80358] Medium CVE-2011-1816: Use-after-free in developer tools
* [81916] Medium CVE-2011-1817: Browser memory corruption in history
deletion
* [81949] High CVE-2011-1818: Use-after-free in image loader
* [83010] Medium CVE-2011-1819: Extension injection into chrome:// pages
* [83275] High CVE-2011-2332: Same origin bypass in v8
* [83743] High CVE-2011-2342: Same origin bypass in DOM
- copy release 12.0.742.91 from beta to stable
* Wed May 25 2011 Claudio Matsuoka <claudio@mandriva.com> 11.0.696.71-1
+ Revision: 678989
- new upstream release 11.0.696.71 (stable)
- security fixes
* [72189] Low CVE-2011-1801: Pop-up blocker bypass.
* [$1000] [82546] High CVE-2011-1804: Stale pointer in floats rendering.
* [82873] Critical CVE-2011-1806: Memory corruption in GPU command buffer.
* [82903] Critical CVE-2011-1807: Out-of-bounds write in blob handling.
- bug fixes
* REGRESSION: selection extended by arrow keys flickers on LinkedIn.com.
(Issue 83197).
* Have ConnectBackupJob try IPv4 first to hide potential long IPv6 connect
timeout (Issue 81686).
* Thu May 12 2011 Claudio Matsuoka <claudio@mandriva.com> 11.0.696.68-1
+ Revision: 673982
- new upstream release 11.0.696.68 (stable)
- security fixes
* [64046] High CVE-2011-1799: Bad casts in Chromium WebKit glue.
* [80608] High CVE-2011-1800: Integer overflows in SVG filters.
* Sat May 07 2011 Claudio Matsuoka <claudio@mandriva.com> 11.0.696.65-1
+ Revision: 671613
- new upstream release 11.0.696.65 (stable)
* fix issue 80580: After deleting bookmarks on the Bookmark managers,
the bookmark bar doesn't display properly with existing bookmarks.
* Fri Apr 29 2011 Claudio Matsuoka <claudio@mandriva.com> 11.0.696.57-1
+ Revision: 660171
- new upstream release 11.0.696.57 (stable)
- security fixes:
* [61502] High CVE-2011-1303: Stale pointer in floating object handling
* [70538] Low CVE-2011-1304: Pop-up block bypass via plug-ins
* [70589] Medium CVE-2011-1305: Linked-list race in database handling
* [71586] Medium CVE-2011-1434: Lack of thread safety in MIME handling
* [72523] Medium CVE-2011-1435: Bad extension with tabs permission can
capture local files
* [72910] Low CVE-2011-1436: Possible browser crash due to bad interaction
with X
* [73526] High CVE-2011-1437: Integer overflows in float rendering
* [74653] High CVE-2011-1438: Same origin policy violation with blobs
* [74763] High CVE-2011-1439: Prevent interference between renderer
processes
* [75186] High CVE-2011-1440: Use-after-free with <ruby> tag and CSS
* [75347] High CVE-2011-1441: Bad cast with floating select lists
* [75801] High CVE-2011-1442: Corrupt node trees with mutation events
* [76001] High CVE-2011-1443: Stale pointers in layering code
* [76542] High CVE-2011-1444: Race condition in sandbox launcher
* [76646] Medium CVE-2011-1445: Out-of-bounds read in SVG
* [76666] [77507] [78031] High CVE-2011-1446: Possible URL bar spoofs with
navigation errors and interrupted loads
* [76966] High CVE-2011-1447: Stale pointer in drop-down list handling
* [77130] High CVE-2011-1448: Stale pointer in height calculations
* [77346] High CVE-2011-1449: Use-after-free in WebSockets
* [77349] Low CVE-2011-1450: Dangling pointers in file dialogs
* [77463] High CVE-2011-1451: Dangling pointers in DOM id map
* [77786] Medium CVE-2011-1452: URL bar spoof with redirect and manual
reload
* [79199] High CVE-2011-1454: Use-after-free in DOM id handling
* [79361] Medium CVE-2011-1455: Out-of-bounds read with multipart-encoded
PDF
* [79364] High CVE-2011-1456: Stale pointers with PDF forms
- detailed changelog at http://goo.gl/arI9m
- copy Chromium 11 sources from beta to stable
- remove Chromium 10 source files
* Fri Apr 15 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.205-1
+ Revision: 653084
- new upstream release 10.0.648.205 (stable)
* Fix issue 75629: CVE-2011-1301: Use-after-free in the GPU process
* Fix issue 78524: CVE-2011-1302: Heap overflow in the GPU process
- detailed changelog at http://goo.gl/wJg8b
* Mon Apr 04 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.204-2
+ Revision: 650370
- update chromium-browser package group
- bump release for buildsystem debug
* Fri Mar 25 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.204-1
+ Revision: 648498
- new upstream release 10.0.648.204 (stable)
* support for password manager
* performance and stability fixes
* fix CVE-2011-1291: Buffer error in base string handling
* fix CVE-2011-1292: Use-after-free in the frame loader
* fix CVE-2011-1293: Use-after-free in HTMLCollection
* fix CVE-2011-1294: Stale pointer in CSS handling
* fix CVE-2011-1295: DOM tree corruption with broken node parentage
* fix CVE-2011-1296: Stale pointer in SVG text handling
- fix some system library settings introduced in revision 647139
+ Funda Wang <fwang@mandriva.org>
- build with more system libs
* Fri Mar 18 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.151-1
+ Revision: 646282
- new upstream release 10.0.648.151 (stable)
* blacklist a small number of HTTPS certificates
* Sat Mar 12 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.133-1
+ Revision: 644042
- new upstream release 10.0.648.133 (stable)
* [CVE-2011-1290] fix memory corruption in style handling
- check presence of patch files
* Fri Mar 11 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-2
+ Revision: 643848
- apply patches correctly
* Wed Mar 09 2011 Claudio Matsuoka <claudio@mandriva.com> 10.0.648.127-1
+ Revision: 643105
- new upstream release 10.0.648.127 (stable)
* New version of V8 which greatly improves javascript performance
* New settings pages that open in a tab, rather than a dialog box
* Improved security with malware reporting and disabling outdated plugins
by default
* Password sync as part of Chrome Sync now enabled by default
* GPU Accelerated Video
* Background WebApps
* webNavigation extension API
- annoucement and security fix list: http://goo.gl/PWdBi
- move chromium patch 10.0.648.114 from beta channel to stable
- move chromium patch 10.0.648.82 from beta channel to stable
- move chromium patch 10.0.648.127 from beta channel to stable
- move chromium patch 10.0.648.126 from beta channel to stable
- move chromium 10.0.648.45 from beta channel to stable
- move patch from beta channel to stable
- move patch from beta channel to stable
* Tue Mar 01 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.107-1
+ Revision: 641075
- new upstream release 9.0.597.107 (stable)
- contains security fixes, see detais at http://goo.gl/rkTSm
- add beta browser to the downgrade notice in spec description
* Sat Feb 12 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.98-1
+ Revision: 637364
- new upstream version 9.0.597.98
- add conflicts to beta channel browser
- add obsoletes entry for old (canary) chromium-browser package
* Thu Feb 10 2011 Claudio Matsuoka <claudio@mandriva.com> 9.0.597.94-1
+ Revision: 637082
- imported package chromium-browser-stable
initial import
2012-07-04 11:57:27 +04:00
Reference in a new issue Copy permalink