FEDORA-2020-d84eb0992e — security update for chromium

obsolete

chromium-81.0.4044.113-1.fc31

FEDORA-2020-d84eb0992e created by spot 4 years ago for Fedora 31

A new major version of Chromium without any security bugs! Just kidding. Here's the CVE list:

CVE-2020-6454 CVE-2020-6423 CVE-2020-6455 CVE-2020-6430 CVE-2020-6456 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 CVE-2020-6445 CVE-2020-6446 CVE-2020-6447 CVE-2020-6448 CVE-2020-6432 CVE-2020-6457

Oh, and this build switches over to a static build, so the chromium-libs and chromium-libs-media subpackages are now obsolete, but it should be slightly better for performance.

This update has been submitted for testing by spot.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

yaneti commented & provided feedback 4 years ago

karma

Unfortunately crashes for me on startup. bug: https://bugzilla.redhat.com/show_bug.cgi?id=1825510

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

4 years ago

yaneti commented & provided feedback 4 years ago

karma

Unfortunately crashes for me on startup. bug: https://bugzilla.redhat.com/show_bug.cgi?id=1825510

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

4 years ago

yaneti commented & provided feedback 4 years ago

karma

Unfortunately crashes for me on startup.

https://bugzilla.redhat.com/show_bug.cgi?id=1825510

yaneti commented & provided feedback 4 years ago

karma

Unfortunately crashes for me on startup. bug: 1825510

yaneti commented & provided feedback 4 years ago

Sorry for the spam, the bodhi comment box wasn't really working for a moment here.

yaneti commented & provided feedback 4 years ago

As I mentioned in the bug report the browser starts with a clean user profile.

Another thing when it manages to start is that the browser menu (the one you get on the three vertical dots) appears to have a broken layout

cowboysmall commented & provided feedback 4 years ago

karma

Also crashes at startup. Doesn't start with a clean user profile for me.

cowboysmall commented & provided feedback 4 years ago

karma

Also crashes at startup. Doesn't start with a clean user profile for me.

cowboysmall commented & provided feedback 4 years ago

karma

Also crashes at startup. Doesn't start with a clean user profile for me.

cowboysmall commented & provided feedback 4 years ago

Apologies for the multiple posts.

cowboysmall commented & provided feedback 4 years ago

I just noticed that chromium-common was removed by 'dnf autoremove' which I ran after 'dnf upgrade --refresh'. If I install this it works OK. Maybe it should be added as a dependency?

ozeszty commented & provided feedback 4 years ago

karma

"A new major version of Chromium without any security bugs!..." :D No issues spotted (upgraded from koji, before it was pushed to testing).

This update has been obsoleted by chromium-81.0.4044.113-2.fc31.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

-1

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

4 years ago

in testing

4 years ago

Builds

chromium-81.0.4044.113-1.fc31

BZ#1822604 CVE-2020-6454 chromium-browser: Use after free in extensions

BZ#1822605 CVE-2020-6423 chromium-browser: Use after free in audio

BZ#1822606 CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL

BZ#1822607 CVE-2020-6430 chromium-browser: Type Confusion in V8

BZ#1822608 CVE-2020-6456 chromium-browser: Insufficient validation of untrusted input in clipboard

BZ#1822609 CVE-2020-6431 chromium-browser: Insufficient policy enforcement in full screen

BZ#1822610 CVE-2020-6433 chromium-browser: Insufficient policy enforcement in extensions

BZ#1822611 CVE-2020-6434 chromium-browser: Use after free in devtools

BZ#1822612 CVE-2020-6435 chromium-browser: Insufficient policy enforcement in extensions

BZ#1822613 CVE-2020-6436 chromium-browser: Use after free in window management

BZ#1822614 CVE-2020-6437 chromium-browser: Inappropriate implementation in WebView

BZ#1822615 CVE-2020-6438 chromium-browser: Insufficient policy enforcement in extensions

BZ#1822616 CVE-2020-6439 chromium-browser: Insufficient policy enforcement in navigations

BZ#1822617 CVE-2020-6440 chromium-browser: Inappropriate implementation in extensions

BZ#1822618 CVE-2020-6441 chromium-browser: Insufficient policy enforcement in omnibox

BZ#1822619 CVE-2020-6442 chromium-browser: Inappropriate implementation in cache

BZ#1822620 CVE-2020-6443 chromium-browser: Insufficient data validation in developer tools

BZ#1822621 CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC

BZ#1822622 CVE-2020-6445 chromium-browser: Insufficient policy enforcement in trusted types

BZ#1822623 CVE-2020-6446 chromium-browser: Insufficient policy enforcement in trusted types

BZ#1822624 CVE-2020-6447 chromium-browser: Inappropriate implementation in developer tools

BZ#1822625 CVE-2020-6448 chromium-browser: Use after free in V8

BZ#1822627 CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 ... chromium: various flaws [fedora-all]

BZ#1824949 CVE-2020-6457 chromium-browser: Use after free in speech recognizer

BZ#1824951 CVE-2020-6457 chromium: chromium-browser: Use after free in speech recognizer [fedora-all]

chromium-81.0.4044.113-1.fc31

Automated Test Results

ignored