FEDORA-2020-a1f140614b — security update for chromium

stable

chromium-85.0.4183.83-1.fc32

FEDORA-2020-a1f140614b created by spot 4 years ago for Fedora 32

Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts.

List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 CVE-2020-6556 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-a1f140614b

This update has been submitted for testing by spot.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

imabug provided feedback 4 years ago

karma

This update has been pushed to testing.

4 years ago

ozeszty provided feedback 4 years ago

karma

This update can be pushed to stable now if the maintainer wishes

4 years ago

diegovasconcelos provided feedback 4 years ago

karma

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

jahed commented & provided feedback 4 years ago

karma

Hardware Acceleration in this build is always disabled.

Bug tracker: https://bugzilla.redhat.com/show_bug.cgi?id=1877268

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

chromium-85.0.4183.83-1.fc32

BZ#1861464 CVE-2020-6537 chromium-browser: Type Confusion in V8

BZ#1861465 CVE-2020-6538 chromium-browser: Inappropriate implementation in WebView

BZ#1861466 CVE-2020-6532 chromium-browser: Use after free in SCTP

BZ#1861467 CVE-2020-6539 chromium-browser: Use after free in CSS

BZ#1861468 CVE-2020-6540 chromium-browser: Heap buffer overflow in Skia

BZ#1861469 CVE-2020-6541 chromium-browser: Use after free in WebUSB

BZ#1861471 CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 chromium: various flaws [fedora-all]

BZ#1861877 Cannot update chromium, blocked by chrome-remote-desktop

BZ#1863323 chromium: FTBFS in Fedora rawhide/f33

BZ#1867939 CVE-2020-6542 chromium-browser: Use after free in ANGLE

BZ#1867940 CVE-2020-6543 chromium-browser: Use after free in task scheduling

BZ#1867941 CVE-2020-6544 chromium-browser: Use after free in media

BZ#1867942 CVE-2020-6545 chromium-browser: Use after free in audio

BZ#1867943 CVE-2020-6546 chromium-browser: Inappropriate implementation in installer

BZ#1867944 CVE-2020-6547 chromium-browser: Incorrect security UI in media

BZ#1867945 CVE-2020-6548 chromium-browser: Heap buffer overflow in Skia

BZ#1867946 CVE-2020-6549 chromium-browser: Use after free in media

BZ#1867947 CVE-2020-6550 chromium-browser: Use after free in IndexedDB

BZ#1867948 CVE-2020-6551 chromium-browser: Use after free in WebXR

BZ#1867949 CVE-2020-6552 chromium-browser: Use after free in Blink

BZ#1867950 CVE-2020-6553 chromium-browser: Use after free in offline mode

BZ#1867951 CVE-2020-6554 chromium-browser: Use after free in extensions

BZ#1867952 CVE-2020-6555 chromium-browser: Out of bounds read in WebGL

BZ#1867956 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 chromium: various flaws [fedora-all]

BZ#1869037 Conflict between chromium from Fedora and a later chromium-freeworld from rpmfusion

BZ#1870002 CVE-2020-6556 chromium-browser: Heap buffer overflow in SwiftShader

BZ#1870006 CVE-2020-6556 chromium: chromium-browser: Heap buffer overflow in SwiftShader [fedora-all]

BZ#1872945 CVE-2020-6559 chromium-browser: Use after free in presentation API

BZ#1872946 CVE-2020-6560 chromium-browser: Insufficient policy enforcement in autofill

BZ#1872947 CVE-2020-6561 chromium-browser: Inappropriate implementation in Content Security Policy

BZ#1872948 CVE-2020-6562 chromium-browser: Insufficient policy enforcement in Blink

BZ#1872949 CVE-2020-6563 chromium-browser: Insufficient policy enforcement in intent handling

BZ#1872950 CVE-2020-6564 chromium-browser: Incorrect security UI in permissions

BZ#1872951 CVE-2020-6565 chromium-browser: Incorrect security UI in Omnibox

BZ#1872952 CVE-2020-6566 chromium-browser: Insufficient policy enforcement in media

BZ#1872953 CVE-2020-6567 chromium-browser: Insufficient validation of untrusted input in command line handling

BZ#1872955 CVE-2020-6568 chromium-browser: Insufficient policy enforcement in intent handling

BZ#1872956 CVE-2020-6569 chromium-browser: Integer overflow in WebUSB

BZ#1872957 CVE-2020-6570 chromium-browser: Side-channel information leakage in WebRTC

BZ#1872960 CVE-2020-6559 CVE-2020-6560 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571 chromium: various flaws [fedora-all]

chromium-85.0.4183.83-1.fc32

Automated Test Results

ignored