From aea1ac02dbf8c1325364ae6ca8107e76af20cebb Mon Sep 17 00:00:00 2001
From: networkException <git@nwex.de>
Date: Thu, 17 Aug 2023 10:27:50 +0200
Subject: [PATCH] ungoogled-chromium: 115.0.5790.170 -> 116.0.5845.96
https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop_15.html
This update includes 26 security fixes.
CVEs:
CVE-2023-2312 CVE-2023-4349 CVE-2023-4350 CVE-2023-4351 CVE-2023-4352
CVE-2023-4353 CVE-2023-4354 CVE-2023-4355 CVE-2023-4356 CVE-2023-4357
CVE-2023-4358 CVE-2023-4359 CVE-2023-4360 CVE-2023-4361 CVE-2023-4362
CVE-2023-4363 CVE-2023-4364 CVE-2023-4365 CVE-2023-4366 CVE-2023-4367
CVE-2023-4368
---
.../networking/browsers/chromium/common.nix | 3 ++-
.../browsers/chromium/upstream-info.nix | 16 ++++++++--------
2 files changed, 10 insertions(+), 9 deletions(-)
diff --git a/pkgs/applications/networking/browsers/chromium/common.nix b/pkgs/applications/networking/browsers/chromium/common.nix
index f555ab289391..6d24f18ec94c 100644
--- a/pkgs/applications/networking/browsers/chromium/common.nix
+++ b/pkgs/applications/networking/browsers/chromium/common.nix
@@ -361,7 +361,6 @@ let
# Optional features:
use_gio = true;
- use_gnome_keyring = false; # Superseded by libsecret
use_cups = cupsSupport;
# Feature overrides:
@@ -384,6 +383,8 @@ let
# We do intentionally not set rustc_version as nixpkgs will never do incremental
# rebuilds, thus leaving this empty is fine.
rust_sysroot_absolute = "${rustc}";
+ # Building with rust is disabled for now - this matches the flags in other major distributions.
+ enable_rust = false;
} // lib.optionalAttrs (!(stdenv.buildPlatform.canExecute stdenv.hostPlatform)) {
# https://www.mail-archive.com/v8-users@googlegroups.com/msg14528.html
arm_control_flow_integrity = "none";
diff --git a/pkgs/applications/networking/browsers/chromium/upstream-info.nix b/pkgs/applications/networking/browsers/chromium/upstream-info.nix
index e53706340011..64db5522b405 100644
--- a/pkgs/applications/networking/browsers/chromium/upstream-info.nix
+++ b/pkgs/applications/networking/browsers/chromium/upstream-info.nix
@@ -48,18 +48,18 @@
ungoogled-chromium = {
deps = {
gn = {
- rev = "e9e83d9095d3234adf68f3e2866f25daf766d5c7";
- sha256 = "0y07c18xskq4mclqiz3a63fz8jicz2kqridnvdhqdf75lhp61f8a";
+ rev = "4bd1a77e67958fb7f6739bd4542641646f264e5d";
+ sha256 = "14h9jqspb86sl5lhh6q0kk2rwa9zcak63f8drp7kb3r4dx08vzsw";
url = "https://gn.googlesource.com/gn";
- version = "2023-05-19";
+ version = "2023-06-09";
};
ungoogled-patches = {
- rev = "115.0.5790.170-1";
- sha256 = "0vk82jacadb4id16596s4751j4idq6903w6sl2s7cj4ppxd6pyf1";
+ rev = "116.0.5845.96-1";
+ sha256 = "14smm0vmqzn2664qdbv7asm8n2gg88zcvwrjpsn54qwk0njv7zlr";
};
};
- sha256 = "1h3j24ihn76qkvckzg703pm1jsh6nbkc48n2zx06kia8wz96567z";
- sha256bin64 = "04jklk2zwkyy8i70v9nk7nw35w2g9pyxdw9w3sn9mddgbjjph5z9";
- version = "115.0.5790.170";
+ sha256 = "108wrm64pig0v24n44zd52jfzsy2kda84r5k8abfvg4sjlm0bh8y";
+ sha256bin64 = "1sr7wfssayw94x8bfn7bk03040221npj7612ccxgzdgr4x5i4adl";
+ version = "116.0.5845.96";
};
}