FEDORA-EPEL-2020-1790461e43 — security update for chromium

chromium-85.0.4183.121-1.el8

FEDORA-EPEL-2020-1790461e43 created by spot a month ago for Fedora EPEL 8

stable

Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs:

CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966

It also has a fix for an issue where networking... uh... didn't.

Update Chromium to 85.0.4183.102. Fix issue where unpackaged components prevented hardware accelerated rendering from working. Also fixes the following security issues: CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959

This update has been submitted for testing by spot.

a month ago

This update's test gating status has been changed to 'ignored'.

a month ago

This update's test gating status has been changed to 'waiting'.

a month ago

This update has obsoleted chromium-85.0.4183.102-1.el8, and has inherited its bugs and notes.

a month ago

This update's test gating status has been changed to 'ignored'.

a month ago

This update has been pushed to testing.

a month ago

This update can be pushed to stable now if the maintainer wishes

2 weeks ago

This update has been submitted for stable by bodhi.

2 weeks ago

This update has been pushed to stable.

2 weeks ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

Builds

chromium-85.0.4183.121-1.el8

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a month ago

in testing

a month ago

in stable

2 weeks ago

BZ#1877090 CVE-2020-6573 chromium-browser: Use after free in video

BZ#1877091 CVE-2020-6574 chromium-browser: Insufficient policy enforcement in installer

BZ#1877093 CVE-2020-6575 chromium-browser: Race in Mojo

BZ#1877094 CVE-2020-6576 chromium-browser: Use after free in offscreen canvas

BZ#1877095 CVE-2020-15959 chromium-browser: Insufficient policy enforcement in networking

BZ#1877098 CVE-2020-15959 CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 chromium: various flaws [epel-all]

BZ#1877268 [REGRESSION] HW acceleration disabled

BZ#1881142 chromium cannot access network

BZ#1881593 CVE-2020-15960 chromium-browser: Out of bounds read in storage

BZ#1881595 CVE-2020-15961 chromium-browser: Insufficient policy enforcement in extensions

BZ#1881596 CVE-2020-15962 chromium-browser: Insufficient policy enforcement in serial

BZ#1881597 CVE-2020-15963 chromium-browser: Insufficient policy enforcement in extensions

BZ#1881598 CVE-2020-15965 chromium-browser: Out of bounds write in V8

BZ#1881599 CVE-2020-15966 chromium-browser: Insufficient policy enforcement in extensions

BZ#1881600 CVE-2020-15964 chromium-browser: Insufficient data validation in media

BZ#1881603 CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 chromium: various flaws [epel-all]

chromium-85.0.4183.121-1.el8

Automated Test Results