FEDORA-2019-9a5e81214f — security update for Chromium

stable

Chromium

FEDORA-2019-9a5e81214f created by tpopela 5 years ago for Fedora 31

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop.html.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-9a5e81214f

This update has been submitted for testing by tpopela.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

imabug provided feedback 5 years ago

karma

This update has been pushed to testing.

5 years ago

spot edited this update.

5 years ago

spot edited this update.

5 years ago

atim provided feedback 5 years ago

karma

This update can be pushed to stable now if the maintainer wishes

5 years ago

atim provided feedback 5 years ago

karma

This update has been submitted for stable by tpopela.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

modified

5 years ago

Builds

chromium-77.0.3865.120-1.fc31

BZ#1762366 CVE-2019-5870 chromium-browser: Use-after-free in media

BZ#1762367 CVE-2019-5871 chromium-browser: Heap overflow in Skia

BZ#1762368 CVE-2019-5872 chromium-browser: Use-after-free in Mojo

BZ#1762369 CVE-2019-5873 chromium-browser: URL bar spoofing on iOS

BZ#1762370 CVE-2019-5874 chromium-browser: External URIs may trigger other browsers

BZ#1762371 CVE-2019-5875 chromium-browser: URL bar spoof via download redirect

BZ#1762372 CVE-2019-13691 chromium-browser: Omnibox spoof

BZ#1762373 CVE-2019-13692 chromium-browser: SOP bypass

BZ#1762374 CVE-2019-5876 chromium-browser: Use-after-free in media

BZ#1762375 CVE-2019-5877 chromium-browser: Out-of-bounds access in V8

BZ#1762376 CVE-2019-5878 chromium-browser: Use-after-free in V8

BZ#1762377 CVE-2019-5879 chromium-browser: Extensions can read some local files

BZ#1762378 CVE-2019-5880 chromium-browser: SameSite cookie bypass

BZ#1762379 CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader

BZ#1762380 CVE-2019-13659 chromium-browser: URL spoof

BZ#1762381 CVE-2019-13660 chromium-browser: Full screen notification overlap

BZ#1762382 CVE-2019-13661 chromium-browser: Full screen notification spoof

BZ#1762383 CVE-2019-13662 chromium-browser: CSP bypass

BZ#1762384 CVE-2019-13663 chromium-browser: IDN spoof

BZ#1762385 CVE-2019-13664 chromium-browser: CSRF bypass

BZ#1762386 CVE-2019-13665 chromium-browser: Multiple file download protection bypass

BZ#1762387 CVE-2019-13666 chromium-browser: Side channel using storage size estimate

BZ#1762388 CVE-2019-13667 chromium-browser: URI bar spoof when using external app URIs

BZ#1762389 CVE-2019-13668 chromium-browser: Global window leak via console

BZ#1762390 CVE-2019-13669 chromium-browser: HTTP authentication spoof

BZ#1762391 CVE-2019-13670 chromium-browser: V8 memory corruption in regex

BZ#1762392 CVE-2019-13671 chromium-browser: Dialog box fails to show origin

BZ#1762393 CVE-2019-13673 chromium-browser: Cross-origin information leak using devtools

BZ#1762394 CVE-2019-13674 chromium-browser: IDN spoofing

BZ#1762395 CVE-2019-13675 chromium-browser: Extensions can be disabled by trailing slash

BZ#1762396 CVE-2019-13676 chromium-browser: Google URI shown for certificate warning

BZ#1762397 CVE-2019-13677 chromium-browser: Chrome web store origin needs to be isolated

BZ#1762398 CVE-2019-13678 chromium-browser: Download dialog spoofing

BZ#1762399 CVE-2019-13679 chromium-browser: User gesture needed for printing

BZ#1762400 CVE-2019-13680 chromium-browser: IP address spoofing to servers

BZ#1762401 CVE-2019-13681 chromium-browser: Bypass on download restrictions

BZ#1762402 CVE-2019-13682 chromium-browser: Site isolation bypass

BZ#1762403 CVE-2019-13683 chromium-browser: Exceptions leaked by devtools

chromium-77.0.3865.120-1.fc31

Automated Test Results

ignored