FEDORA-2018-4e6cdafa48 — security update for chromium

obsolete

chromium-69.0.3497.92-1.fc29

FEDORA-2018-4e6cdafa48 created by spot 6 years ago for Fedora 29

Update to Chromium 69. (EPEL-7 update is blocked by a GCC bug: 1629813, so as soon as devtoolset-8 arrives...)

Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078

This update has been submitted for testing by spot.

6 years ago

This update has been pushed to testing.

6 years ago

churchyard commented & provided feedback 6 years ago

karma

Filling this form form chromium 69

churchyard commented & provided feedback 6 years ago

karma

Filling this form form chromium 69

churchyard commented & provided feedback 6 years ago

Hopefully the double post isn't a Chromium bug ;)

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been obsoleted by chromium-69.0.3497.100-1.fc29.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

6 years ago

in testing

6 years ago

Builds

chromium-69.0.3497.92-1.fc29

BZ#1625466 CVE-2018-16065 chromium-browser: Out of bounds write in V8

BZ#1625467 CVE-2018-16066 chromium-browser: Out of bounds read in Blink

BZ#1625469 CVE-2018-16067 chromium-browser: Out of bounds read in WebAudio

BZ#1625470 CVE-2018-16068 chromium-browser: Out of bounds write in Mojo

BZ#1625471 CVE-2018-16069 chromium-browser: Out of bounds read in SwiftShader

BZ#1625472 CVE-2018-16070 chromium-browser: Integer overflow in Skia

BZ#1625473 CVE-2018-16071 chromium-browser: Use after free in WebRTC

BZ#1625474 CVE-2018-16072 chromium-browser: Cross origin pixel leak in Chrome's interaction with Android's MediaPlayer

BZ#1625475 CVE-2018-16073 chromium-browser: Site Isolation bypass after tab restore

BZ#1625476 CVE-2018-16074 chromium-browser: Site Isolation bypass using Blob URLS

BZ#1625477 CVE-2018-16075 chromium-browser: Local file access in Blink

BZ#1625478 CVE-2018-16076 chromium-browser: Out of bounds read in PDFium

BZ#1625479 CVE-2018-16077 chromium-browser: Content security policy bypass in Blink

BZ#1625480 CVE-2018-16078 chromium-browser: Credit card information leak in Autofill

BZ#1625481 CVE-2018-16079 chromium-browser: URL spoof in permission dialogs

BZ#1625482 CVE-2018-16080 chromium-browser: URL spoof in full screen mode

BZ#1625484 CVE-2018-16081 chromium-browser: Local file access in DevTools

BZ#1625485 CVE-2018-16082 chromium-browser: Stack buffer overflow in SwiftShader

BZ#1625486 CVE-2018-16083 chromium-browser: Out of bounds read in WebRTC

BZ#1625487 CVE-2018-16084 chromium-browser: User confirmation bypass in external protocol handling

BZ#1625488 CVE-2018-16085 chromium-browser: Use after free in Memory Instrumentation

BZ#1625491 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16072 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 ... chromium: various flaws [fedora-all]

BZ#1628078 CVE-2018-17458 chromium-browser: Function signature mismatch in WebAssembly

BZ#1628080 CVE-2018-17459 chromium-browser: URL Spoofing in Omnibox

BZ#1628084 CVE-2018-17458 CVE-2018-17459 chromium: various flaws [fedora-all]

chromium-69.0.3497.92-1.fc29

Automated Test Results

ignored