FEDORA-2019-859384e002 — security update for chromium

stable

chromium-71.0.3578.98-1.fc29

FEDORA-2019-859384e002 created by spot 5 years ago for Fedora 29

Update to Chromium 71. Fixes CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2018-18346 CVE-2018-18347 CVE-2018-18348 CVE-2018-18349 CVE-2018-18350 CVE-2018-18351 CVE-2018-18352 CVE-2018-18353 CVE-2018-18354 CVE-2018-18355 CVE-2018-18356 CVE-2018-18357 CVE-2018-18358 CVE-2018-18359

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-859384e002

This update has been submitted for testing by spot.

5 years ago

This update has been pushed to testing.

5 years ago

sikevux commented & provided feedback 5 years ago

karma

LGTM

imabug provided feedback 5 years ago

karma

imabug provided feedback 5 years ago

karma

pcw commented & provided feedback 5 years ago

karma

Tested with many of my usual websites. Seems fine.

This update has been submitted for batched by bodhi.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

sumantrom commented & provided feedback 5 years ago

karma

All the basic sites and media renders fine

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-71.0.3578.98-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1656547 CVE-2018-17480 chromium-browser: Out of bounds write in V8

BZ#1656548 CVE-2018-17481 chromium-browser: Use after frees in PDFium

BZ#1656549 CVE-2018-18335 chromium-browser: Heap buffer overflow in Skia

BZ#1656550 CVE-2018-18336 chromium-browser: Use after free in PDFium

BZ#1656551 CVE-2018-18337 chromium-browser: Use after free in Blink

BZ#1656552 CVE-2018-18338 chromium-browser: Heap buffer overflow in Canvas

BZ#1656553 CVE-2018-18339 chromium-browser: Use after free in WebAudio

BZ#1656554 CVE-2018-18340 chromium-browser: Use after free in MediaRecorder

BZ#1656555 CVE-2018-18341 chromium-browser: Heap buffer overflow in Blink

BZ#1656556 CVE-2018-18342 chromium-browser: Out of bounds write in V8

BZ#1656557 CVE-2018-18343 chromium-browser: Use after free in Skia

BZ#1656558 CVE-2018-18344 chromium-browser: Inappropriate implementation in Extensions

BZ#1656559 CVE-2018-18345 chromium-browser: Inappropriate implementation in Site Isolation

BZ#1656560 CVE-2018-18346 chromium-browser: Incorrect security UI in Blink

BZ#1656561 CVE-2018-18347 chromium-browser: Inappropriate implementation in Navigation

BZ#1656562 CVE-2018-18348 chromium-browser: Inappropriate implementation in Omnibox

BZ#1656563 CVE-2018-18349 chromium-browser: Insufficient policy enforcement in Blink

BZ#1656564 CVE-2018-18350 chromium-browser: Insufficient policy enforcement in Blink

BZ#1656565 CVE-2018-18351 chromium-browser: Insufficient policy enforcement in Navigation

BZ#1656566 CVE-2018-18352 chromium-browser: Inappropriate implementation in Media

BZ#1656567 CVE-2018-18353 chromium-browser: Inappropriate implementation in Network Authentication

BZ#1656568 CVE-2018-18354 chromium-browser: Insufficient data validation in Shell Integration

BZ#1656569 CVE-2018-18355 chromium-browser: Insufficient policy enforcement in URL Formatter

BZ#1656570 CVE-2018-18356 chromium-browser: Use after free in Skia

BZ#1656571 CVE-2018-18357 chromium-browser: Insufficient policy enforcement in URL Formatter

BZ#1656572 CVE-2018-18358 chromium-browser: Insufficient policy enforcement in Proxy

BZ#1656573 CVE-2018-18359 chromium-browser: Out of bounds read in V8

BZ#1656575 CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2018-18346 ... chromium: various flaws [fedora-all]

chromium-71.0.3578.98-1.fc29

Automated Test Results

ignored