FEDORA-2017-e5bbb657c5 — security update for chromium

obsolete

chromium-62.0.3202.89-1.fc25

FEDORA-2017-e5bbb657c5 created by spot 6 years ago for Fedora 25

Security fix for CVE-2017-15398, CVE-2017-15399

Security fix for CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15389 CVE-2017-15390 CVE-2017-15391 CVE-2017-15392 CVE-2017-15393 CVE-2017-15394 CVE-2017-15395 CVE-2017-5124 CVE-2017-5125 CVE-2017-5126 CVE-2017-5127.

Build switched to use gtk3.

Update to 61.0.3163.100. Security fix for CVE-2017-5111, CVE-2017-5112, CVE-2017-5113, CVE-2017-5114, CVE-2017-5115, CVE-2017-5116, CVE-2017-5117, CVE-2017-5118, CVE-2017-5119, CVE-2017-5120, CVE-2017-5121, CVE-2017-5122

This update has been submitted for testing by spot.

6 years ago

This update has obsoleted chromium-62.0.3202.75-1.fc25, and has inherited its bugs and notes.

6 years ago

sdyroff commented & provided feedback 6 years ago

karma

I get the following error when running:

# chromium-browser 
/usr/bin/chromium-browser: symbol lookup error: /usr/lib64/chromium-browser/./libmedia.so: undefined symbol: _ZN4base5Timer13SetTaskRunnerE13scoped_refptrINS_22SingleThreadTaskRunnerEE

I do have all stable updates installed and updated chromium with the following command:

dnf update --enablerepo=updates-testing chromium

sdyroff commented & provided feedback 6 years ago

karma

I get the following error when running:

chromium-browser 
/usr/bin/chromium-browser: symbol lookup error: /usr/lib64/chromium-browser/./libmedia.so: undefined symbol: _ZN4base5Timer13SetTaskRunnerE13scoped_refptrINS_22SingleThreadTaskRunnerEE

My system has all stable updates installed and I installed chromium from testing with:

dnf update --enablerepo=updates-testing chromium

sdyroff commented & provided feedback 6 years ago

karma

I get the following error when running:

chromium-browser 
/usr/bin/chromium-browser: symbol lookup error: /usr/lib64/chromium-browser/./libmedia.so: undefined symbol: _ZN4base5Timer13SetTaskRunnerE13scoped_refptrINS_22SingleThreadTaskRunnerEE

My system has all stable updates installed and I installed chromium from testing with:

dnf update --enablerepo=updates-testing chromium

This update has been pushed to testing.

6 years ago

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

augenauf provided feedback 6 years ago

karma

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

chromium-62.0.3202.89-1.fc25

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

BZ#1488772 CVE-2017-5111 chromium-browser: use after free in pdfium

BZ#1488773 CVE-2017-5112 chromium-browser: heap buffer overflow in webgl

BZ#1488774 CVE-2017-5113 chromium-browser: heap buffer overflow in skia

BZ#1488775 CVE-2017-5114 chromium-browser: memory lifecycle issue in pdfium

BZ#1488776 CVE-2017-5115 chromium-browser: type confusion in v8

BZ#1488777 CVE-2017-5116 chromium-browser: type confusion in v8

BZ#1488778 CVE-2017-5117 chromium-browser: use of uninitialized value in skia

BZ#1488779 CVE-2017-5118 chromium-browser: bypass of content security policy in blink

BZ#1488781 CVE-2017-5119 chromium-browser: use of uninitialized value in skia

BZ#1488782 CVE-2017-5120 chromium-browser: potential https downgrade during redirect navigation

BZ#1488785 CVE-2017-5111 CVE-2017-5112 CVE-2017-5113 CVE-2017-5114 CVE-2017-5115 CVE-2017-5116 CVE-2017-5117 CVE-2017-5118 CVE-2017-5119 CVE-2017-5120 chromium: various flaws [fedora-all]

BZ#1494391 CVE-2017-5121 chromium-browser: out-of-bounds access in v8

BZ#1494392 CVE-2017-5122 chromium-browser: out-of-bounds access in v8

BZ#1494394 CVE-2017-5121 CVE-2017-5122 chromium: various flaws [fedora-all]

BZ#1502233 Chromium dark theme compatibility regression

BZ#1503530 CVE-2017-5124 chromium-browser: uxss with mhtml

BZ#1503531 CVE-2017-5125 chromium-browser: heap overflow in skia

BZ#1503532 CVE-2017-5126 chromium-browser: use after free in pdfium

BZ#1503533 CVE-2017-5127 chromium-browser: use after free in pdfium

BZ#1503534 CVE-2017-5128 chromium-browser: heap overflow in webgl

BZ#1503535 CVE-2017-5129 chromium-browser: use after free in webaudio

BZ#1503536 CVE-2017-5132 chromium-browser: incorrect stack manipulation in webassembly

BZ#1503537 CVE-2017-5130 chromium-browser: heap overflow in libxml2

BZ#1503538 CVE-2017-5131 chromium-browser: out of bounds write in skia

BZ#1503539 CVE-2017-5133 chromium-browser: out of bounds write in skia

BZ#1503540 CVE-2017-15386 chromium-browser: ui spoofing in blink

BZ#1503542 CVE-2017-15387 chromium-browser: content security bypass

BZ#1503543 CVE-2017-15388 chromium-browser: out of bounds read in skia

BZ#1503544 CVE-2017-15389 chromium-browser: url spoofing in omnibox

BZ#1503545 CVE-2017-15390 chromium-browser: url spoofing in omnibox

BZ#1503546 CVE-2017-15391 chromium-browser: extension limitation bypass in extensions

BZ#1503547 CVE-2017-15392 chromium-browser: incorrect registry key handling in platformintegration

BZ#1503548 CVE-2017-15393 chromium-browser: referrer leak in devtools

BZ#1503549 CVE-2017-15394 chromium-browser: url spoofing in extensions ui

BZ#1503550 CVE-2017-15395 chromium-browser: null pointer dereference in imagecapture

BZ#1503551 CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15389 CVE-2017-15390 CVE-2017-15391 CVE-2017-15392 CVE-2017-15393 CVE-2017-15394 CVE-2017-15395 CVE-2017-5124 CVE-2017-5125 CVE-2017-5126 CVE-2017-5127 ... chromium: various flaws [fedora-all]

BZ#1510429 CVE-2017-15398 chromium-browser: stack buffer overflow in quic

BZ#1510431 CVE-2017-15399 chromium-browser: use after free in v8

BZ#1510434 CVE-2017-15398 CVE-2017-15399 chromium: various flaws [fedora-all]

chromium-62.0.3202.89-1.fc25

Automated Test Results

passed