FEDORA-2016-eec838a3a0 — security update for chromium

stable

chromium-53.0.2785.101-1.fc25

FEDORA-2016-eec838a3a0 created by spot 8 years ago for Fedora 25

Stable update to 53.0.2785.101.

Security fix for CVE-2016-5147, CVE-2016-5148, CVE-2016-5149, CVE-2016-5150, CVE-2016-5151, CVE-2016-5152, CVE-2016-5153, CVE-2016-5154, CVE-2016-5155, CVE-2016-5156, CVE-2016-5157, CVE-2016-5158, CVE-2016-5159, CVE-2016-5161, CVE-2016-5162, CVE-2016-5163, CVE-2016-5164, CVE-2016-5165, CVE-2016-5166, CVE-2016-5160, CVE-2016-5167

Also applies fix for chrome-remote-desktop where HOME env variable was not properly set via systemd service.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-eec838a3a0

This update has been submitted for testing by spot.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by spot.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

chromium-53.0.2785.101-1.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1372207 CVE-2016-5147 chromium-browser: universal xss in blink

BZ#1372208 CVE-2016-5148 chromium-browser: universal xss in blink

BZ#1372209 CVE-2016-5149 chromium-browser: script injection in extensions

BZ#1372210 CVE-2016-5150 chromium-browser: use after free in blink

BZ#1372212 CVE-2016-5151 chromium-browser: use after free in pdfium

BZ#1372213 CVE-2016-5152 chromium-browser: heap overflow in pdfium

BZ#1372214 CVE-2016-5153 chromium-browser: use after destruction in blink

BZ#1372215 CVE-2016-5154 chromium-browser: heap overflow in pdfium

BZ#1372216 CVE-2016-5155 chromium-browser: address bar spoofing

BZ#1372217 CVE-2016-5156 chromium-browser: use after free in event bindings

BZ#1372218 CVE-2016-5157 chromium-browser: heap overflow in pdfium

BZ#1372219 CVE-2016-5158 chromium-browser: heap overflow in pdfium

BZ#1372220 CVE-2016-5159 chromium-browser: heap overflow in pdfium

BZ#1372221 CVE-2016-5161 chromium-browser: type confusion in blink

BZ#1372222 CVE-2016-5162 chromium-browser: extensions web accessible resources bypass

BZ#1372223 CVE-2016-5163 chromium-browser: address bar spoofing

BZ#1372224 CVE-2016-5164 chromium-browser: universal xss using devtools

BZ#1372225 CVE-2016-5165 chromium-browser: script injection in devtools

BZ#1372227 CVE-2016-5166 chromium-browser: smb relay attack via save page as

BZ#1372228 CVE-2016-5160 chromium-browser: extensions web accessible resources bypass

BZ#1372229 CVE-2016-5167 chromium-browser: various fixes from internal audits

BZ#1372232 chromium: various flaws [fedora-all]

chromium-53.0.2785.101-1.fc25

Automated Test Results

None