* gnu/packages/java.scm (java-junixsocket-common-2): New variable.
(junixsocket-source): New variable.
Change-Id: I1054694feb2e8a39cf03b432feb0506ae9bc22bd
* gnu/packages/patches/java-simplevalidation-1.14.1.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add reference to it.
* gnu/packages/java.scm (java-simplevalidation-1.14.1): New variable.
Change-Id: I2e69ee8c5f6dfa1f0beba3d01c82ddae51de3c5f
* gnu/packages/patches/java-jtidy-remove-xerces-dependency.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add reference to it.
* gnu/packages/java.scm (java-jtidy): New variable.
Change-Id: Ic127db3f8b4358d54ce37ea86545f244f291e297
Besides updating ungoogled-chromium, this is a follow up to commits
10ea4f874e and
0f87ff6672 which lacked the full logic necessary
for using the bundled icu library and the new regexes included on the desktop
and manpage templates for this package.
Fixes CVEs:
CVE-2026-7363: Use after free in Canvas. Reported by heapracer.
CVE-2026-7361: Use after free in iOS. Reported by Google.
CVE-2026-7344: Use after free in Accessibility. Reported by Google.
CVE-2026-7343: Use after free in Views. Reported by Google.
CVE-2026-7333: Use after free in GPU.
Reported by c6eed09fc8b174b0f3eebedcceb1e792.
CVE-2026-7360: Insufficient validation of untrusted input in Compositing.
Reported by Google.
CVE-2026-7359: Use after free in ANGLE. Reported by Google.
CVE-2026-7358: Use after free in Animation. Reported by Google.
CVE-2026-7334: Use after free in Views. Reported by Batuhan Esref KOC.
CVE-2026-7357: Use after free in GPU. Reported by Google.
CVE-2026-7356: Use after free in Navigation. Reported by Google.
CVE-2026-7354: Out of bounds read and write in Angle. Reported by Google.
CVE-2026-7353: Heap buffer overflow in Skia. Reported by Google.
CVE-2026-7352: Use after free in Media. Reported by Google.
CVE-2026-7351: Race in MHTML. Reported by Google.
CVE-2026-7350: Use after free in WebMIDI. Reported by Google.
CVE-2026-7349: Use after free in Cast. Reported by Google.
CVE-2026-7348: Use after free in Codecs. Reported by Google.
CVE-2026-7335: Use after free in media.
Reported by Jungwoo Lee (@physicube) and Wongi Lee (@_qwerty_po).
CVE-2026-7336: Use after free in WebRTC. Reported by Mozilla.
CVE-2026-7337: Type Confusion in V8. Reported by q@calif.io.
CVE-2026-7347: Use after free in Chromoting. Reported by Google.
CVE-2026-7346: Inappropriate implementation in Tint. Reported by Google.
CVE-2026-7345: Insufficient validation of untrusted input in Feedback.
Reported by Google.
CVE-2026-7338: Use after free in Cast. Reported by Krace.
CVE-2026-7342: Use after free in WebView. Reported by Google.
CVE-2026-7341: Use after free in WebRTC. Reported by Google.
CVE-2026-7339: Heap buffer overflow in WebRTC.
Reported by c6eed09fc8b174b0f3eebedcceb1e792.
CVE-2026-7340: Integer overflow in ANGLE.
Reported by 86ac1f1587b71893ed2ad792cd7dde32.
CVE-2026-7355: Use after free in Media. Reported by Google.
See:
<https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html>
* gnu/packages/chromium.scm (%chromium-version): Update to 147.0.7727.137.
(%ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium) [arguments] <#:configure-flags>: Set icu_use_data_file
true.
<#:phases> {install}: Include icudtl.dat to copied libs. Add @@uri_scheme
and @@extra_desktop_entries to regex substitutions on desktop file and
manpage.
Change-Id: I1342eac3ba3a85e8851189844614d47512c1ca42
Signed-off-by: Andreas Enge <andreas@enge.fr>
* gnu/packages/chromium.scm (ungoogled-chromium) [arguments]
<#:configure-flags>: Conditionally add use_v4l2_codec and use_av1_hw_decoder
and set them true on aarch64-linux. Also ensure that use_vaapi is set to
false on this architecture.
Change-Id: Ib7f1c2d492ccb71df253e621b9cd626ec0942bc6
Signed-off-by: Andreas Enge <andreas@enge.fr>
Danny Milosavljevic