{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Update to Chromium 67.\nSecurity fix for CVE-2018-6123 CVE-2018-6124 CVE-2018-6125 CVE-2018-6126 CVE-2018-6127 CVE-2018-6128 CVE-2018-6129 CVE-2018-6130 CVE-2018-6131 CVE-2018-6132 CVE-2018-6133 CVE-2018-6134 CVE-2018-6135 CVE-2018-6136 CVE-2018-6137 CVE-2018-6148\n\n----\n\nUpdate to 66.0.3359.181.\nSecurity fix for  \tCVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102 CVE-2018-6103 CVE-2018-6104 CVE-2018-6105 CVE-2018-6106 CVE-2018-6107 CVE-2018-6108 CVE-2018-6109 CVE-2018-6110 CVE-2018-6111 CVE-2018-6112 CVE-2018-6113 CVE-2018-6114 CVE-2018-6116 CVE-2018-6117 CVE-2018-6118 CVE-2018-6120 CVE-2018-6121 CVE-2018-6122\n", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-06-11 14:28:31", "date_modified": null, "date_approved": null, "date_testing": "2018-06-12 23:29:06", "date_stable": "2018-07-20 13:58:37", "alias": "FEDORA-EPEL-2018-656b24ec40", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-07-20 13:58:37", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-656b24ec40", "title": "chromium-67.0.3396.79-1.el7", "version_hash": "c7566a5377955492d19a319b50ec38a228701227", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "spot", "email": "spotrh@gmail.com", "id": 224, "avatar": "https://seccdn.libravatar.org/avatar/6fe82351f854e333f2fb661c4fa2fcc3172d897a90ab823204327fa9e5c82de5?s=24&d=retro", "openid": "spot.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "arm-qa"}, {"name": "cvsfedora"}, {"name": "mirror-ia64"}, {"name": "gitfedora-logos"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "signed_fpca"}, {"name": "openhw2012"}, {"name": "paste-deleter"}, {"name": "3d-printing-sig"}, {"name": "cla_redhat"}, {"name": "fedora-contributor"}, {"name": "gitgeneric-release"}, {"name": "gitmoksha"}, {"name": "irc-support-operators"}, {"name": "ipausers"}, {"name": "r-maint-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by spot. ", "timestamp": "2018-06-11 14:28:31", "update_id": 117270, "user_id": 91, "id": 797338, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [chromium-66.0.3359.181-3.el7](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-297fb7f6c0), and has inherited its bugs and notes.", "timestamp": "2018-06-11 14:28:34", "update_id": 117270, "user_id": 91, "id": 797340, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-06-12 23:29:40", "update_id": 117270, "user_id": 91, "id": 798108, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2018-06-25 13:23:15", "update_id": 117270, "user_id": 3125, "id": 803621, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "sikevux", "email": "sikevux@sikevux.se", "id": 3125, "avatar": "https://seccdn.libravatar.org/avatar/88033bbab3a88decd28b4749ed898e6eba76000fc26a0d7b880b58db300e62b2?s=24&d=retro", "openid": "sikevux.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2018-06-27 00:00:16", "update_id": 117270, "user_id": 91, "id": 804149, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "lgtm too", "timestamp": "2018-07-16 20:39:06", "update_id": 117270, "user_id": 4373, "id": 811862, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dneu", "email": "dneu@mitre.org", "id": 4373, "avatar": "https://seccdn.libravatar.org/avatar/ef711b8590fcfc7ecfea36d44fb3903994e1952a200b7c08ab3a863f440afd83?s=24&d=retro", "openid": "dneu.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "", "timestamp": "2018-07-18 18:35:54", "update_id": 117270, "user_id": 4384, "id": 812459, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kathenas", "email": "philip.wyett@kathenas.org", "id": 4384, "avatar": "https://seccdn.libravatar.org/avatar/37f997fc5fadce9663ee748b87421a008b160c8b6306336b88df3a62f3f7fef8?s=24&d=retro", "openid": "kathenas.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Running with no issues on RHEL / CentOS 7.", "timestamp": "2018-07-18 18:37:00", "update_id": 117270, "user_id": 4384, "id": 812460, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kathenas", "email": "philip.wyett@kathenas.org", "id": 4384, "avatar": "https://seccdn.libravatar.org/avatar/37f997fc5fadce9663ee748b87421a008b160c8b6306336b88df3a62f3f7fef8?s=24&d=retro", "openid": "kathenas.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2018-07-18 18:37:01", "update_id": 117270, "user_id": 91, "id": 812461, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-07-19 03:00:10", "update_id": 117270, "user_id": 91, "id": 812642, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-07-20 13:59:01", "update_id": 117270, "user_id": 91, "id": 813471, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "chromium-67.0.3396.79-1.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1568761, "title": "CVE-2018-6085 chromium-browser: Use after free in Disk Cache", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568762, "title": "CVE-2018-6086 chromium-browser: Use after free in Disk Cache", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568763, "title": "CVE-2018-6087 chromium-browser: Use after free in WebAssembly", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568764, "title": "CVE-2018-6088 chromium-browser: Use after free in PDFium", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568765, "title": "CVE-2018-6089 chromium-browser: Same origin policy bypass in Service Worker", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568766, "title": "CVE-2018-6090 chromium-browser: Heap buffer overflow in Skia", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568767, "title": "CVE-2018-6091 chromium-browser: Incorrect handling of plug-ins by Service Worker", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568769, "title": "CVE-2018-6092 chromium-browser: Integer overflow in WebAssembly", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568770, "title": "CVE-2018-6093 chromium-browser: Same origin bypass in Service Worker", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568771, "title": "CVE-2018-6094 chromium-browser: Exploit hardening regression in Oilpan", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568773, "title": "CVE-2018-6095 chromium-browser: Lack of meaningful user interaction requirement before file upload", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568774, "title": "CVE-2018-6096 chromium-browser: Fullscreen UI spoof", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568775, "title": "CVE-2018-6097 chromium-browser: Fullscreen UI spoof", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568776, "title": "CVE-2018-6098 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568777, "title": "CVE-2018-6099 chromium-browser: CORS bypass in ServiceWorker", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568778, "title": "CVE-2018-6100 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568779, "title": "CVE-2018-6101 chromium-browser: Insufficient protection of remote debugging prototol in DevTools", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568780, "title": "CVE-2018-6102 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568781, "title": "CVE-2018-6103 chromium-browser: UI spoof in Permissions", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568782, "title": "CVE-2018-6104 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568785, "title": "CVE-2018-6105 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568786, "title": "CVE-2018-6106 chromium-browser: Incorrect handling of promises in V8", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568787, "title": "CVE-2018-6107 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568788, "title": "CVE-2018-6108 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568789, "title": "CVE-2018-6109 chromium-browser: Incorrect handling of files by FileAPI", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568790, "title": "CVE-2018-6110 chromium-browser: Incorrect handling of plaintext files via file://", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568791, "title": "CVE-2018-6111 chromium-browser: Heap-use-after-free in DevTools", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568792, "title": "CVE-2018-6112 chromium-browser: Incorrect URL handling in DevTools", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568793, "title": "CVE-2018-6113 chromium-browser: URL spoof in Navigation", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568794, "title": "CVE-2018-6114 chromium-browser: CSP bypass", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568795, "title": "CVE-2018-6115 chromium-browser: SmartScreen bypass in downloads", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568796, "title": "CVE-2018-6116 chromium-browser: Incorrect low memory handling in WebAssembly", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568797, "title": "CVE-2018-6117 chromium-browser: Confusing autofill settings", "security": true, "parent": true, "feedback": []}, {"bug_id": 1568800, "title": "CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 ... chromium: various flaws [epel-7]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1573856, "title": "CVE-2018-6118 chromium-browser: Use after free in Media Cache", "security": true, "parent": true, "feedback": []}, {"bug_id": 1573860, "title": "CVE-2018-6118 chromium: chromium-browser: Use after free in Media Cache [epel-7]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1577113, "title": "CVE-2018-6121 chromium-browser: Privilege Escalation in extensions", "security": true, "parent": true, "feedback": []}, {"bug_id": 1577114, "title": "CVE-2018-6122 chromium-browser: Type confusion in V8", "security": true, "parent": true, "feedback": []}, {"bug_id": 1577115, "title": "CVE-2018-6120 chromium-browser: Heap buffer overflow in PDFium", "security": true, "parent": true, "feedback": []}, {"bug_id": 1577116, "title": "CVE-2018-6120 CVE-2018-6121 CVE-2018-6122 chromium: various flaws [epel-7]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1584032, "title": "CVE-2018-6123 chromium-browser: Use after free in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584033, "title": "CVE-2018-6124 chromium-browser: Type confusion in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584034, "title": "CVE-2018-6125 chromium-browser: Overly permissive policy in WebUSB", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584035, "title": "CVE-2018-6126 Skia: Heap buffer overflow rasterizing paths in SVG", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584037, "title": "CVE-2018-6127 chromium-browser: Use after free in indexedDB", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584038, "title": "CVE-2018-6128 chromium-browser: uXSS in Chrome on iOS", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584039, "title": "CVE-2018-6129 chromium-browser: Out of bounds memory access in WebRTC", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584040, "title": "CVE-2018-6130 chromium-browser: Out of bounds memory access in WebRTC", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584042, "title": "CVE-2018-6131 chromium-browser: Incorrect mutability protection in WebAssembly", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584043, "title": "CVE-2018-6132 chromium-browser: Use of uninitialized memory in WebRTC", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584044, "title": "CVE-2018-6133 chromium-browser: URL spoof in Omnibox", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584045, "title": "CVE-2018-6134 chromium-browser: Referrer Policy bypass in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584046, "title": "CVE-2018-6135 chromium-browser: UI spoofing in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584047, "title": "CVE-2018-6136 chromium-browser: Out of bounds memory access in V8", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584048, "title": "CVE-2018-6137 chromium-browser: Leak of visited status of page in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584049, "title": "CVE-2018-6138 chromium-browser: Overly permissive policy in Extensions", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584050, "title": "CVE-2018-6139 chromium-browser: Restrictions bypass in the debugger extension API", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584051, "title": "CVE-2018-6140 chromium-browser: Restrictions bypass in the debugger extension API", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584052, "title": "CVE-2018-6141 chromium-browser: Heap buffer overflow in Skia", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584054, "title": "CVE-2018-6142 chromium-browser: Out of bounds memory access in V8", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584055, "title": "CVE-2018-6143 chromium-browser: Out of bounds memory access in V8", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584056, "title": "CVE-2018-6144 chromium-browser: Out of bounds memory access in PDFium", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584057, "title": "CVE-2018-6145 chromium-browser: Incorrect escaping of MathML in Blink", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584058, "title": "CVE-2018-6147 chromium-browser: Password fields not taking advantage of OS protections in Views", "security": true, "parent": true, "feedback": []}, {"bug_id": 1584059, "title": "CVE-2018-6123 CVE-2018-6124 CVE-2018-6125 CVE-2018-6126 CVE-2018-6127 CVE-2018-6129 CVE-2018-6130 CVE-2018-6131 CVE-2018-6132 CVE-2018-6133 CVE-2018-6134 CVE-2018-6135 CVE-2018-6136 CVE-2018-6137 CVE-2018-6138 ... chromium: various flaws [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1588379, "title": "CVE-2018-6148 chromium-browser: Incorrect handling of CSP header", "security": true, "parent": true, "feedback": []}, {"bug_id": 1588381, "title": "CVE-2018-6148 chromium: chromium-browser: Incorrect handling of CSP header [epel-7]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-EPEL-2018-656b24ec40", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}