FEDORA-EPEL-2017-8f80d01c29 — security update for chromium

stable

chromium-60.0.3112.113-2.el7

FEDORA-EPEL-2017-8f80d01c29 created by spot 7 years ago for Fedora EPEL 7

Update to 60.0.3112.113. Added support for aarch64 (except on EPEL7).

Update to 60.0.3112.101. Apply upstream fix for cameras reporting 0x0 resolution formats.

Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092, CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097, CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102, CVE-2017-5103, CVE-2017-5104, CVE-2017-7000, CVE-2017-5105, CVE-2017-5106, CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110.

New subpackage -headless.

This update has been submitted for testing by spot.

7 years ago

This update has obsoleted chromium-60.0.3112.101-2.el7, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

churchyard commented & provided feedback 7 years ago

@spot Could this be pushed to stable before the new update obsoletes it? I don't have an EL7 workstation to test this on, but this have been here for ~3 weeks. Thanks for consideration.

This update has been submitted for stable by spot.

7 years ago

churchyard commented & provided feedback 7 years ago

Thanks.

This update has been pushed to stable.

7 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

chromium-60.0.3112.113-2.el7

BZ#1413644 Unsupported encoding iso-8859-2 / windows-1251 / ...

BZ#1460813 chromium not part of aarch64 package repo.

BZ#1465357 Chromium don't work with Facetime camera (Macbook)

BZ#1475193 CVE-2017-5091 chromium-browser: use after free in indexeddb

BZ#1475194 CVE-2017-5092 chromium-browser: use after free in ppapi

BZ#1475195 CVE-2017-5093 chromium-browser: ui spoofing in blink

BZ#1475196 CVE-2017-5094 chromium-browser: type confusion in extensions

BZ#1475197 CVE-2017-5095 chromium-browser: out-of-bounds write in pdfium

BZ#1475198 CVE-2017-5096 chromium-browser: user information leak via android intents

BZ#1475199 CVE-2017-5097 chromium-browser: out-of-bounds read in skia

BZ#1475200 CVE-2017-5098 chromium-browser: use after free in v8

BZ#1475201 CVE-2017-5099 chromium-browser: out-of-bounds write in ppapi

BZ#1475202 CVE-2017-5100 chromium-browser: use after free in chrome apps

BZ#1475203 CVE-2017-5101 chromium-browser: url spoofing in omnibox

BZ#1475204 CVE-2017-5102 chromium-browser: uninitialized use in skia

BZ#1475205 CVE-2017-5103 chromium-browser: uninitialized use in skia

BZ#1475206 CVE-2017-5104 chromium-browser: ui spoofing in browser

BZ#1475207 CVE-2017-7000 chromium-browser: pointer disclosure in sqlite

BZ#1475208 CVE-2017-5105 chromium-browser: url spoofing in omnibox

BZ#1475209 CVE-2017-5106 chromium-browser: url spoofing in omnibox

BZ#1475210 CVE-2017-5107 chromium-browser: user information leak via svg

BZ#1475211 CVE-2017-5108 chromium-browser: type confusion in pdfium

BZ#1475212 CVE-2017-5109 chromium-browser: ui spoofing in browser

BZ#1475213 CVE-2017-5110 chromium-browser: ui spoofing in payments dialog

BZ#1475216 chromium: various flaws [fedora-all]

chromium-60.0.3112.113-2.el7

Automated Test Results

None