FEDORA-2018-39be36e9fc — security update for chromium

stable

chromium-69.0.3497.100-1.fc29

FEDORA-2018-39be36e9fc created by spot 6 years ago for Fedora 29

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428

Update to Chromium 69. (EPEL-7 update is blocked by a GCC bug: 1629813, so as soon as devtoolset-8 arrives...)

Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-39be36e9fc

This update has been submitted for testing by spot.

6 years ago

This update has obsoleted chromium-69.0.3497.92-1.fc29, and has inherited its bugs and notes.

6 years ago

churchyard commented & provided feedback 6 years ago

karma

Sent from 69.0.3497.100.

This update has been pushed to testing.

6 years ago

davisclick provided feedback 6 years ago

karma

davisclick commented & provided feedback 6 years ago

karma

work for me.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by spot.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

hellbangerkarna commented & provided feedback 6 years ago

karma

Works

hellbangerkarna commented & provided feedback 6 years ago

karma

Works

This update has been submitted for batched by spot.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-69.0.3497.100-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1625466 CVE-2018-16065 chromium-browser: Out of bounds write in V8

BZ#1625467 CVE-2018-16066 chromium-browser: Out of bounds read in Blink

BZ#1625469 CVE-2018-16067 chromium-browser: Out of bounds read in WebAudio

BZ#1625470 CVE-2018-16068 chromium-browser: Out of bounds write in Mojo

BZ#1625471 CVE-2018-16069 chromium-browser: Out of bounds read in SwiftShader

BZ#1625472 CVE-2018-16070 chromium-browser: Integer overflow in Skia

BZ#1625473 CVE-2018-16071 chromium-browser: Use after free in WebRTC

BZ#1625474 CVE-2018-16072 chromium-browser: Cross origin pixel leak in Chrome's interaction with Android's MediaPlayer

BZ#1625475 CVE-2018-16073 chromium-browser: Site Isolation bypass after tab restore

BZ#1625476 CVE-2018-16074 chromium-browser: Site Isolation bypass using Blob URLS

BZ#1625477 CVE-2018-16075 chromium-browser: Local file access in Blink

BZ#1625478 CVE-2018-16076 chromium-browser: Out of bounds read in PDFium

BZ#1625479 CVE-2018-16077 chromium-browser: Content security policy bypass in Blink

BZ#1625480 CVE-2018-16078 chromium-browser: Credit card information leak in Autofill

BZ#1625481 CVE-2018-16079 chromium-browser: URL spoof in permission dialogs

BZ#1625482 CVE-2018-16080 chromium-browser: URL spoof in full screen mode

BZ#1625484 CVE-2018-16081 chromium-browser: Local file access in DevTools

BZ#1625485 CVE-2018-16082 chromium-browser: Stack buffer overflow in SwiftShader

BZ#1625486 CVE-2018-16083 chromium-browser: Out of bounds read in WebRTC

BZ#1625487 CVE-2018-16084 chromium-browser: User confirmation bypass in external protocol handling

BZ#1625488 CVE-2018-16085 chromium-browser: Use after free in Memory Instrumentation

BZ#1625491 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 ... chromium: various flaws [fedora-all]

BZ#1626164 CVE-2018-16428 chromium: glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]

BZ#1626173 CVE-2018-16429 chromium: glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c [fedora-all]

BZ#1628078 CVE-2018-17458 chromium-browser: Function signature mismatch in WebAssembly

BZ#1628080 CVE-2018-17459 chromium-browser: URL Spoofing in Omnibox

BZ#1628084 CVE-2018-17458 CVE-2018-17459 chromium: various flaws [fedora-all]

BZ#1633391 CVE-2018-6119 chromium: chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page [fedora-all]

BZ#1633394 CVE-2018-6055 chromium: chromium-browser: Insufficient policy enforcement in Catalog Service [fedora-all]

chromium-69.0.3497.100-1.fc29

Automated Test Results

ignored