Unverified Commit aea1ac02 authored by networkException's avatar networkException
Browse files

ungoogled-chromium: 115.0.5790.170 -> 116.0.5845.96 

https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html

This update includes 26 security fixes.

CVEs:
CVE-2023-2312 CVE-2023-4349 CVE-2023-4350 CVE-2023-4351 CVE-2023-4352
CVE-2023-4353 CVE-2023-4354 CVE-2023-4355 CVE-2023-4356 CVE-2023-4357
CVE-2023-4358 CVE-2023-4359 CVE-2023-4360 CVE-2023-4361 CVE-2023-4362
CVE-2023-4363 CVE-2023-4364 CVE-2023-4365 CVE-2023-4366 CVE-2023-4367
CVE-2023-4368
parent 9caacb47

pkgs/applications/networking/browsers/chromium/common.nix

+2 −1
Original line number Diff line number Diff line
@@ -361,7 +361,6 @@ let 


      # Optional features:

      use_gio = true;

      use_gnome_keyring = false; # Superseded by libsecret

      use_cups = cupsSupport;



      # Feature overrides:
@@ -384,6 +383,8 @@ let 
      # We do intentionally not set rustc_version as nixpkgs will never do incremental

      # rebuilds, thus leaving this empty is fine.

      rust_sysroot_absolute = "${rustc}";

      # Building with rust is disabled for now - this matches the flags in other major distributions.

      enable_rust = false;

    } // lib.optionalAttrs (!(stdenv.buildPlatform.canExecute stdenv.hostPlatform)) {

      # https://www.mail-archive.com/v8-users@googlegroups.com/msg14528.html

      arm_control_flow_integrity = "none";

pkgs/applications/networking/browsers/chromium/upstream-info.nix

+8 −8
Original line number Diff line number Diff line
@@ -48,18 +48,18 @@ 
  ungoogled-chromium = {

    deps = {

      gn = {

        rev = "e9e83d9095d3234adf68f3e2866f25daf766d5c7";

        sha256 = "0y07c18xskq4mclqiz3a63fz8jicz2kqridnvdhqdf75lhp61f8a";

        rev = "4bd1a77e67958fb7f6739bd4542641646f264e5d";

        sha256 = "14h9jqspb86sl5lhh6q0kk2rwa9zcak63f8drp7kb3r4dx08vzsw";

        url = "https://gn.googlesource.com/gn";

        version = "2023-05-19";

        version = "2023-06-09";

      };

      ungoogled-patches = {

        rev = "115.0.5790.170-1";

        sha256 = "0vk82jacadb4id16596s4751j4idq6903w6sl2s7cj4ppxd6pyf1";

        rev = "116.0.5845.96-1";

        sha256 = "14smm0vmqzn2664qdbv7asm8n2gg88zcvwrjpsn54qwk0njv7zlr";

      };

    };

    sha256 = "1h3j24ihn76qkvckzg703pm1jsh6nbkc48n2zx06kia8wz96567z";

    sha256bin64 = "04jklk2zwkyy8i70v9nk7nw35w2g9pyxdw9w3sn9mddgbjjph5z9";

    version = "115.0.5790.170";

    sha256 = "108wrm64pig0v24n44zd52jfzsy2kda84r5k8abfvg4sjlm0bh8y";

    sha256bin64 = "1sr7wfssayw94x8bfn7bk03040221npj7612ccxgzdgr4x5i4adl";

    version = "116.0.5845.96";

  };

}