FEDORA-2019-8d98e2633a — security update for chromium

chromium-75.0.3770.100-2.fc29

FEDORA-2019-8d98e2633a created by spot 6 months ago for Fedora 29

obsolete

Update to Chromium 75.0.3770.100. The usual pile of bugs and CVE fixes. vaapi support disabled, just too broken. :(

Fixes CVE-2019-5805 CVE-2019-5806 CVE-2019-5807 CVE-2019-5808 CVE-2019-5809 CVE-2019-5810 CVE-2019-5811 CVE-2019-5813 CVE-2019-5814 CVE-2019-5815 CVE-2019-5818 CVE-2019-5819 CVE-2019-5820 CVE-2019-5821 CVE-2019-5822 CVE-2019-5824 CVE-2019-5825 CVE-2019-5826 CVE-2019-5827 CVE-2019-5828 CVE-2019-5829 CVE-2019-5830 CVE-2019-5831 CVE-2019-5832 CVE-2019-5833 CVE-2019-5834 CVE-2019-5835 CVE-2019-5836 CVE-2019-5837 CVE-2019-5838 CVE-2019-5839 CVE-2019-5840 CVE-2019-5842

This update has been submitted for testing by spot.

6 months ago

This update test gating status has been changed to 'waiting'.

6 months ago

This update test gating status has been changed to 'ignored'.

6 months ago

spot edited this update.

6 months ago

This update has been pushed to testing.

6 months ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

5 months ago

filiperosset provided feedback 5 months ago

karma

kwizart commented & provided feedback 5 months ago

karma

Fix installation with 3rd part counterpart.

kwizart commented & provided feedback 5 months ago

karma

It would fix installation with 3rd part counterpart. but unfortunately, I've experienced a crash. Tried with a clean profile, same...

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

5 months ago

kwizart commented & provided feedback 5 months ago

karma

Sorry for the lack of proper report, here a minimal crash log https://paste.fedoraproject.org/paste/xTVct0SJQ4~S~qtYaNec3g

rathann commented & provided feedback 5 months ago

karma

This is crashing for me as well.

rathann commented & provided feedback 5 months ago

karma

Crashing upon start up here as well.

This update has been obsoleted by chromium-75.0.3770.100-3.fc29.

5 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

-1

Signed

Content Type

RPM

Test Gating

Builds

chromium-75.0.3770.100-2.fc29

Settings

Unstable by Karma

-3

Dates

submitted

6 months ago

in testing

6 months ago

modified

6 months ago

BZ#1702895 CVE-2019-5805 chromium-browser: Use after free in PDFium

BZ#1702896 CVE-2019-5806 chromium-browser: Integer overflow in Angle

BZ#1702897 CVE-2019-5807 chromium-browser: Memory corruption in V8

BZ#1702898 CVE-2019-5808 chromium-browser: Use after free in Blink

BZ#1702899 CVE-2019-5809 chromium-browser: Use after free in Blink

BZ#1702900 CVE-2019-5810 chromium-browser: User information disclosure in Autofill

BZ#1702901 CVE-2019-5811 chromium-browser: CORS bypass in Blink

BZ#1702902 CVE-2019-5812 chromium-browser: URL spoof in Omnibox on iOS

BZ#1702903 CVE-2019-5813 chromium-browser: Out of bounds read in V8

BZ#1702904 CVE-2019-5814 chromium-browser: CORS bypass in Blink

BZ#1702905 CVE-2019-5815 chromium-browser: Heap buffer overflow in Blink

BZ#1702906 CVE-2019-5816 chromium-browser: Exploit persistence extension on Android

BZ#1702907 CVE-2019-5817 chromium-browser: Heap buffer overflow in Angle on Windows

BZ#1702908 CVE-2019-5818 chromium-browser: Uninitialized value in media reader

BZ#1702909 CVE-2019-5819 chromium-browser: Incorrect escaping in developer tools

BZ#1702910 CVE-2019-5820 chromium-browser: Integer overflow in PDFium

BZ#1702911 CVE-2019-5821 chromium-browser: Integer overflow in PDFium

BZ#1702912 CVE-2019-5822 chromium-browser: CORS bypass in download manager

BZ#1702913 CVE-2019-5823 chromium-browser: Forced navigation from service worker

BZ#1702915 CVE-2019-5805 CVE-2019-5806 CVE-2019-5807 CVE-2019-5808 CVE-2019-5809 CVE-2019-5810 CVE-2019-5811 CVE-2019-5813 CVE-2019-5814 CVE-2019-5815 CVE-2019-5818 CVE-2019-5819 CVE-2019-5820 CVE-2019-5821 CVE-2019-5822 ... chromium: various flaws [fedora-all]

BZ#1706805 CVE-2019-5827 chromium-browser: out-of-bounds access in SQLite

BZ#1706812 CVE-2019-5824 chromium-browser: parameter passing error in media player leading to unauthorized access

BZ#1707247 CVE-2019-5825 chromium-browser: Out-of-bounds write in V8

BZ#1707248 CVE-2019-5826 chromium-browser: Use-after-free in IndexedDB

BZ#1718256 CVE-2019-5828 chromium-browser: Use after free in ServiceWorker

BZ#1718257 CVE-2019-5829 chromium-browser: Use after free in Download Manager

BZ#1718258 CVE-2019-5830 chromium-browser: Incorrectly credentialed requests in CORS

BZ#1718259 CVE-2019-5831 chromium-browser: Incorrect map processing in V8

BZ#1718260 CVE-2019-5832 chromium-browser: Incorrect CORS handling in XHR

BZ#1718261 CVE-2019-5833 chromium-browser: Inconsistent security UI placement

BZ#1718262 CVE-2019-5834 chromium-browser: URL spoof in Omnibox on iOS

BZ#1718263 CVE-2019-5835 chromium-browser: Out of bounds read in Swiftshader

BZ#1718264 CVE-2019-5836 chromium-browser: Heap buffer overflow in Angle

BZ#1718266 CVE-2019-5837 chromium-browser: Cross-origin resources size disclosure in Appcache

BZ#1718267 CVE-2019-5838 chromium-browser: Overly permissive tab access in Extensions

BZ#1718268 CVE-2019-5839 chromium-browser: Incorrect handling of certain code points in Blink

BZ#1718269 CVE-2019-5840 chromium-browser: Popup blocker bypass

BZ#1720544 CVE-2019-5842 chromium-browser: Use-after-free in Blink

chromium-75.0.3770.100-2.fc29

Automated Test Results