chromium,ungoogled-chromium,chromedriver: 116.0.5845.187/96 -> 117.0.5938.88 #255653
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_15.html This update includes 11 security fixes. CVEs: CVE-2023-4863 CVE-2023-4900 CVE-2023-4901 CVE-2023-4902 CVE-2023-4903 CVE-2023-4904 CVE-2023-4905 CVE-2023-4906 CVE-2023-4907 CVE-2023-4908 CVE-2023-4909
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_15.html This update includes 11 security fixes. CVEs: CVE-2023-4863 CVE-2023-4900 CVE-2023-4901 CVE-2023-4902 CVE-2023-4903 CVE-2023-4904 CVE-2023-4905 CVE-2023-4906 CVE-2023-4907 CVE-2023-4908 CVE-2023-4909
networkException
added
1.severity: security
ofborg
bot
requested review from
thefloweringash,
squalus,
primeos and
michaeladler
ofborg
bot
added
11.by: package-maintainer
emilylange
changed the title
|
@ofborg build chromium |
|
Backport failed for Please cherry-pick the changes locally. git fetch origin release-23.05
git worktree add -d .worktree/backport-255653-to-release-23.05 origin/release-23.05
cd .worktree/backport-255653-to-release-23.05
git checkout -b backport-255653-to-release-23.05
ancref=$(git merge-base 5148520bfab61f99fd25fb9ff7bfbb50dad3c9db df39696f6b35b4e21cf15bb65518ee1b5f67ee3d)
git cherry-pick -x $ancref..df39696f6b35b4e21cf15bb65518ee1b5f67ee3d |
12 tasks
1 task
|
Successfully created backport PR for |
12 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of changes
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_15.html
This update includes 11 security fixes.
CVEs:
CVE-2023-4863 CVE-2023-4900 CVE-2023-4901 CVE-2023-4902 CVE-2023-4903
CVE-2023-4904 CVE-2023-4905 CVE-2023-4906 CVE-2023-4907 CVE-2023-4908
CVE-2023-4909
Note that CVE-2023-4863 has already been addressed by #254702, also note
that due to chromium not vendoring libwebp the actual fix was in #254775.
See the tracking issue for CVE-2023-4863 #254798.
This pull request depends on #255463 due to including new scripts that hit
this bug in the source tarball.
Things done
sandbox = trueset innix.conf? (See Nix manual)nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/)