This fixes CVE-2020-16013 and CVE-2020-16017.
* gnu/packages/chromium.scm (%chromium-version): Set to 86.0.4240.198.
(ungoogled-chromium): Update hash.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Patch in absolute
file name of libGL.so, and install Chromiums own libEGL.so and libGLESv2.so.
This fixes CVE-2020-15999, CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, and
CVE-2020-16003.
* gnu/packages/chromium.scm (ungoogled-chromium): Update to
86.0.4240.111-0.c34a56d.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 86.
Include bundled libc++, jsoncpp, re2 and libvpx for now.
(gentoo-patch, chromium-gcc-patchset, %gentoo-patches, %gentoo-revision,
xcb-proto/python2): Remove variables.
(%debian-revision, %debian-patches): Update to debian/84.0.4147.105-1. Remove
jsoncpp unbundling patch.
(%ungoogled-revision, %ungoogled-origin): Update to c34a56db4c121238fface560.
(%chromium-version, arch-patch, %arch-revision): New variables.
(%arch-patches): Add more patches.
(ungoogled-chromium-snippet): Don't apply GCC or Gentoo patches. Don't
unbundle libvpx or re2.
(ungoogled-chromium): Update to 86.0.4240.75-0.c34a56d.
[arguments]: Adjust #:configure-flags and substitutions for 86. Add
workaround for building with bundled libc++. Adjust install phase to take a
hard coded list of files instead of using SCANDIR and REGEXP-EXEC.
[native-inputs]: Change from CLANG-10 to CLANG-11.
[inputs]: Remove JSONCPP, RE2 and XCB-PROTO/PYTHON2.
* gnu/packages/chromium.scm (%preserved-third-party-files): Preserve the
bundled fork of tcmalloc.
(ungoogled-chromium)[arguments]: Remove "use_allocator" from #:configure-flags.
* gnu/packages/chromium.scm (ungoogled-chromium-snippet): Add substitution to
allow using unbundled dependencies in "official" builds.
(lld-as-ld, lld-wrapper, lld/wrapped): New variables.
(ungoogled-chromium)[arguments]: Add "is_official_build" to #:configure-flags.
Remove redundant or unnecessary flags, disable system protobuf. Use llvm-ar
and llvm-nm instead of their binutils equivalents.
[native-inputs]: Add LLD/WRAPPED.
[inputs]: Remove PROTOBUF.
* gnu/packages/patches/ungoogled-chromium-system-jsoncpp.patch,
gnu/packages/patches/ungoogled-chromium-system-zlib.patch: Delete files.
* gnu/packages/patches/ungoogled-chromium-system-nspr.patch: New file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 84.
(%ungoogled-revision): Set to df199c04ff367da59ce52a23a3f3b305dd3b00c3.
(%debian-revision): Set to debian/83.0.4103.116-3.
(%gentoo-revision): Set to f3f649046d31ebdbc8c4a302b2384504eff78027.
(chromium-gcc-patchset, %chromium-gcc-patches): New variables.
(%gentoo-patches): Remove GCC patches, which have been moved to the above
repo. Add ffmpeg compatibility patch.
(%debian-patches): Add zlib and jsoncpp patch; remove nspr patch.
(%ungoogled-origin): Update hash.
(ungoogled-chromium-snippet): Add the new GCC patches. Remove obsolete local
patches, add new.
(xcb-proto/python2): New variable.
(ungoogled-chromium): Update to 84.0.4147.89-0..df199c0.
[arguments]: Add "is_unsafe_developer_build", "max_jobs_per_link",
"exclude_unwind_tables", "xcbproto_path", "perfetto_use_system_protobuf" to
#:configure-flags. Remove "linux_use_bundled_binutils". Adjust vulkan
header substitutions.
[native-inputs]: Remove YASM.
[inputs]: Change from FFMPEG-4.2 to FFMPEG. Add PROTOBUF and XCB-PROTO/PYTHON2.
* gnu/packages/chromium.scm (computed-origin-method, %chromium-origin): Remove.
(ungoogled-chromium-source): Rename to ...
(ungoogled-chromium-snippet): ... this. Adjust for running as snippet.
(ungoogled-chromium)[source]: Use URL-FETCH, with custom snippet.
Fixes <https://bugs.gnu.org/41987>.
Reported by Jonathan Brielmaier <jonathan.brielmaier@web.de>.
* gnu/packages/video.scm (ffmpeg-4.2): New public variable.
* gnu/packages/chromium.scm (ungoogled-chromium)[inputs]: Change from FFMPEG
to FFMPEG-4.2.
* gnu/packages/regex.scm (re2): Update to 2020-05-01.
[source](modules, snippet): New fields.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Add substitution
to adjust for re2 API change.
* gnu/packages/qt.scm (qtwebengine)[arguments]: Likewise.
This release fixes CVE-2020-6831 and CVE-2020-6464.
* gnu/packages/chromium.scm (%chromium-version): Set to 81.0.4044.138.
(%chromium-origin): Update hash.
This fixes CVE-2020-6462 and CVE-2020-6461.
* gnu/packages/chromium.scm (%chromium-version): Set to 81.0.4044.129.
(%ungoogled-revision): Set to c2a89fb6b5b559c826796c811741fa8ed3e11de8.
(%chromium-origin, %ungoogled-origin): Update hashes.
This fixes CVE-2020-6459, CVE-2020-6460, and CVE-2020-6458.
* gnu/packages/chromium.scm (%chromium-version): Set to 81.0.4044.122.
(%ungoogled-revision): Set to 31d6e60c96481599b42072b4489e4468280198e3.
(%chromium-origin, %ungoogled-origin): Update hashes.
This release fixes CVE-2020-6430, CVE-2020-6456, CVE-2020-6431, CVE-2020-6432,
CVE-2020-6433, CVE-2020-6434, CVE-2020-6435, CVE-2020-6436, CVE-2020-6437,
CVE-2020-6438, CVE-2020-6439, CVE-2020-6440, CVE-2020-6441, CVE-2020-6442,
CVE-2020-6443, CVE-2020-6444, CVE-2020-6445, CVE-2020-6446, CVE-2020-6447,
and CVE-2020-6448.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 81.
(%chromium-version): Set to 81.0.4044.92.
(%ungoogled-revision): Set to b484ad4c0bdb696c86d941798ae6b0e2bd0db35d.
(%debian-revision): Set to debian/81.0.4044.92-1.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium-source): Remove PYTHON-2 from the environment, use
PYTHON-WRAPPER instead. Call "remove_bundled_libraries.py" using PYTHON-2
directly.
(ungoogled-chromium)[arguments]: Remove "is_cfi=false" from #:configure-flags.
Adjust CXXFLAGS to ignore unknown compiler warnings.
[inputs]: Change from ICU4C to ICU4C-66.1.
This releases fixes CVE-2020-6422, CVE-2020-6424, CVE-2020-6425,
CVE-2020-6426, CVE-2020-6427, CVE-2020-6428, CVE-2020-6429, CVE-2019-20503,
and CVE-2020-6449.
* gnu/packages/chromium.scm (%chromium-version): Set to 80.0.3987.149.
(%ungoogled-revision): Set to 516e2d990a50a4bbeb8c583e56333c2935e2af95.
(%chromium-origin, %ungoogled-origin): Update hashes.
* gnu/packages/chromium.scm (%chromium-version): Set to 80.0.3987.132.
(%ungoogled-revision): Set to 7e68f18f1d16a132fe7d913a176daf79897eaa58.
(%chromium-origin): Update hash.
(%ungoogled-origin): Change back to canonical upstream. Update hash.
This release fixes CVE-2020-6407 and CVE-2020-6418.
* gnu/packages/chromium.scm (%chromium-version): Set to 80.0.3987.122.
(%ungoogled-revision): Update to 6056988937eb.
(%chromium-origin): Update hash.
(%ungoogled-origin): Download from pull request, update hash.
This is a follow-up to commit f613d459be.
* gnu/packages/chromium.scm (%preserved-third-party-files): Annotate newly
added entries with license information.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for
Chromium 80.
(%chromium-version): Set to 80.0.3987.116.
(%ungoogled-revision): Set to bb952f18c8c80c569583edd8dbb0b54443f49043.
(%debian-revision): Set to debian/80.0.3987.116-1.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium)[arguments]: In #:configure-flags, add "is_cfi=false".
Remove "is_clang", "enable_iterator_debugging", "exclude_unwind_tables",
"use_jumbo_build", "jumbo_file_merge_limit". Adjust environment for building
with Clang.
[native-inputs]: Remove GCC-8. Add CLANG-9 and LD-WRAPPER-NEXT.
