--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-03d5f14bbe
2020-05-24 00:57:45.596853
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora EPEL 8
Version : 81.0.4044.138
Release : 1.el8
URL :
http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
This update fixes the following security vulnerabilities: * CVE-2020-6464 *
CVE-2020-6461 * CVE-2020-6462 ---- Will Chromium stop releasing updates long
enough for one to make it to EPEL stable? Probably not. This one fixes:
CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 ---- Fix dependency issue introduced
when switching from a "shared" build to a "static" build. ---- A new
major
version of Chromium without any security bugs! Just kidding. Here's the CVE
list: CVE-2020-6454 CVE-2020-6423 CVE-2020-6455 CVE-2020-6430 CVE-2020-6456
CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436
CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441
CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 CVE-2020-6445 CVE-2020-6446
CVE-2020-6447 CVE-2020-6448 CVE-2020-6432 CVE-2020-6457 Oh, and this build
switches over to a static build, so the chromium-libs and chromium-libs-media
subpackages are now obsolete, but it should be slightly better for performance.
---- Bugfix release from Google for 80.0.3987.162. ---- Update to
80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 * CVE-2020-6451 ���
CVE-2020-6452 ---- Update to 80.0.3987.149. Upstream says it fixes "13"
security issues, but only lists these CVEs: * CVE-2020-6422: Use after free in
WebGL * CVE-2020-6424: Use after free in media * CVE-2020-6425: Insufficient
policy enforcement in extensions. * CVE-2020-6426: Inappropriate implementation
in V8 * CVE-2020-6427: Use after free in audio * CVE-2020-6428: Use after free
in audio * CVE-2020-6429: Use after free in audio. * CVE-2019-20503: Out of
bounds read in usersctplib. * CVE-2020-6449: Use after free in audio ----
Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by
default (except on nvidia). List of CVEs fixed (since last update): *
CVE-2019-20446 * CVE-2020-6381 * CVE-2020-6382 * CVE-2020-6383 *
CVE-2020-6384 * CVE-2020-6385 * CVE-2020-6386 * CVE-2020-6387 * CVE-2020-6388
* CVE-2020-6389 * CVE-2020-6390 * CVE-2020-6391 * CVE-2020-6392 *
CVE-2020-6393 * CVE-2020-6394 * CVE-2020-6395 * CVE-2020-6396 * CVE-2020-6397
* CVE-2020-6398 * CVE-2020-6399 * CVE-2020-6400 * CVE-2020-6401 *
CVE-2020-6402 * CVE-2020-6403 * CVE-2020-6404 * CVE-2020-6405 *
CVE-2020-6406 * CVE-2020-6407 * CVE-2020-6408 * CVE-2020-6409 * CVE-2020-6410
* CVE-2020-6411 * CVE-2020-6412 * CVE-2020-6413 * CVE-2020-6414 *
CVE-2020-6415 * CVE-2020-6416 * CVE-2020-6417 * CVE-2020-6418 * CVE-2020-6420
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 7 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.138-1
- update to 81.0.4044.138
* Tue May 5 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.129-1
- update to 81.0.4044.129
* Thu Apr 23 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.122-1
- update to 81.0.4044.122
* Tue Apr 21 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.113-2
- add explicit Requires: chromium-common
* Thu Apr 16 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.113-1
- update to 81.0.4044.113
* Mon Apr 13 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.92-1
- update to 81.0.4044.92
- squelch the selinux output in the post scriptlet
- add Provides/Obsoletes in case we're build with shared set to 0
- add ulimit -n 4096 (needed for static builds, probably not harmful for shared builds
either)
- do static build
* Sat Apr 4 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.163-1
- update to 80.0.3987.163
* Wed Apr 1 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.162-1
- update to 80.0.3987.162
* Wed Mar 18 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.149-1
- update to 80.0.3987.149
* Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.132-1
- update to 80.0.3987.132
- disable C++17 changes (this means f32+ will no longer build, but it segfaulted
immediately)
* Thu Feb 27 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.122-1
- update to 80.0.3987.122
* Mon Feb 17 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.106-1
- update to 80.0.3987.106
* Wed Feb 5 2020 Tom Callaway <spot(a)fedoraproject.org> - 80.0.3987.87-1
- update to 80.0.3987.87
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
79.0.3945.130-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1797608 - CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file
with nested patterns
https://bugzilla.redhat.com/show_bug.cgi?id=1797608
[ 2 ] Bug #1801160 - CVE-2020-6381 chromium-browser: Integer overflow in JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1801160
[ 3 ] Bug #1801161 - CVE-2020-6382 chromium-browser: Type Confusion in JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1801161
[ 4 ] Bug #1801162 - CVE-2020-6385 chromium-browser: Insufficient policy enforcement in
storage
https://bugzilla.redhat.com/show_bug.cgi?id=1801162
[ 5 ] Bug #1801163 - CVE-2020-6387 chromium-browser: Out of bounds write in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1801163
[ 6 ] Bug #1801164 - CVE-2020-6388 chromium-browser: Out of bounds memory access in
WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1801164
[ 7 ] Bug #1801165 - CVE-2020-6389 chromium-browser: Out of bounds write in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1801165
[ 8 ] Bug #1801166 - CVE-2020-6390 chromium-browser: Out of bounds memory access in
streams
https://bugzilla.redhat.com/show_bug.cgi?id=1801166
[ 9 ] Bug #1801167 - CVE-2020-6391 chromium-browser: Insufficient validation of
untrusted input in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1801167
[ 10 ] Bug #1801168 - CVE-2020-6392 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1801168
[ 11 ] Bug #1801169 - CVE-2020-6393 chromium-browser: Insufficient policy enforcement in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1801169
[ 12 ] Bug #1801170 - CVE-2020-6394 chromium-browser: Insufficient policy enforcement in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1801170
[ 13 ] Bug #1801171 - CVE-2020-6395 chromium-browser: Out of bounds read in JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1801171
[ 14 ] Bug #1801172 - CVE-2020-6396 chromium-browser: Inappropriate implementation in
Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1801172
[ 15 ] Bug #1801173 - CVE-2020-6397 chromium-browser: Incorrect security UI in sharing
https://bugzilla.redhat.com/show_bug.cgi?id=1801173
[ 16 ] Bug #1801174 - CVE-2020-6398 chromium-browser: Uninitialized use in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1801174
[ 17 ] Bug #1801175 - CVE-2020-6399 chromium-browser: Insufficient policy enforcement in
AppCache
https://bugzilla.redhat.com/show_bug.cgi?id=1801175
[ 18 ] Bug #1801176 - CVE-2020-6400 chromium-browser: Inappropriate implementation in
CORS
https://bugzilla.redhat.com/show_bug.cgi?id=1801176
[ 19 ] Bug #1801177 - CVE-2020-6401 chromium-browser: Insufficient validation of
untrusted input in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1801177
[ 20 ] Bug #1801178 - CVE-2020-6402 chromium-browser: Insufficient policy enforcement in
downloads
https://bugzilla.redhat.com/show_bug.cgi?id=1801178
[ 21 ] Bug #1801179 - CVE-2020-6403 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1801179
[ 22 ] Bug #1801180 - CVE-2020-6404 chromium-browser: Inappropriate implementation in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1801180
[ 23 ] Bug #1801181 - CVE-2020-6405 sqlite: Out-of-bounds read in SELECT with ON/USING
clause
https://bugzilla.redhat.com/show_bug.cgi?id=1801181
[ 24 ] Bug #1801182 - CVE-2020-6406 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1801182
[ 25 ] Bug #1801184 - CVE-2020-6408 chromium-browser: Insufficient policy enforcement in
CORS
https://bugzilla.redhat.com/show_bug.cgi?id=1801184
[ 26 ] Bug #1801185 - CVE-2020-6409 chromium-browser: Inappropriate implementation in
Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1801185
[ 27 ] Bug #1801186 - CVE-2020-6410 chromium-browser: Insufficient policy enforcement in
navigation
https://bugzilla.redhat.com/show_bug.cgi?id=1801186
[ 28 ] Bug #1801187 - CVE-2020-6411 chromium-browser: Insufficient validation of
untrusted input in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1801187
[ 29 ] Bug #1801188 - CVE-2020-6412 chromium-browser: Insufficient validation of
untrusted input in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1801188
[ 30 ] Bug #1801189 - CVE-2020-6413 chromium-browser: Inappropriate implementation in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1801189
[ 31 ] Bug #1801190 - CVE-2020-6414 chromium-browser: Insufficient policy enforcement in
Safe Browsing
https://bugzilla.redhat.com/show_bug.cgi?id=1801190
[ 32 ] Bug #1801191 - CVE-2020-6415 chromium-browser: Inappropriate implementation in
JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1801191
[ 33 ] Bug #1801192 - CVE-2020-6416 chromium-browser: Insufficient data validation in
streams
https://bugzilla.redhat.com/show_bug.cgi?id=1801192
[ 34 ] Bug #1801193 - CVE-2020-6417 chromium-browser: Inappropriate implementation in
installer
https://bugzilla.redhat.com/show_bug.cgi?id=1801193
[ 35 ] Bug #1807341 - chromium-browser: Out of bounds memory access in streams
https://bugzilla.redhat.com/show_bug.cgi?id=1807341
[ 36 ] Bug #1807343 - CVE-2020-6418 chromium-browser: Type confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1807343
[ 37 ] Bug #1807349 - CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()
https://bugzilla.redhat.com/show_bug.cgi?id=1807349
[ 38 ] Bug #1807381 - CVE-2020-6407 chromium-browser: Out of bounds memory access in
streams
https://bugzilla.redhat.com/show_bug.cgi?id=1807381
[ 39 ] Bug #1807498 - CVE-2020-6383 chromium-browser: Type confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1807498
[ 40 ] Bug #1807499 - CVE-2020-6384 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1807499
[ 41 ] Bug #1807500 - CVE-2020-6386 chromium-browser: Use after free in speech
https://bugzilla.redhat.com/show_bug.cgi?id=1807500
[ 42 ] Bug #1811073 - CVE-2020-6420 chromium-browser: Insufficient policy enforcement in
media
https://bugzilla.redhat.com/show_bug.cgi?id=1811073
[ 43 ] Bug #1815241 - CVE-2020-6424 chromium-browser: Use after free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1815241
[ 44 ] Bug #1815242 - CVE-2020-6425 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1815242
[ 45 ] Bug #1815243 - CVE-2020-6426 chromium-browser: Inappropriate implementation in
V8
https://bugzilla.redhat.com/show_bug.cgi?id=1815243
[ 46 ] Bug #1815244 - CVE-2020-6427 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1815244
[ 47 ] Bug #1815245 - CVE-2020-6428 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1815245
[ 48 ] Bug #1815247 - CVE-2020-6429 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1815247
[ 49 ] Bug #1815248 - CVE-2020-6449 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1815248
[ 50 ] Bug #1815259 - CVE-2020-6422 chromium-browser: Use after free in WebGL
https://bugzilla.redhat.com/show_bug.cgi?id=1815259
[ 51 ] Bug #1820155 - CVE-2020-6450 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1820155
[ 52 ] Bug #1820156 - CVE-2020-6451 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1820156
[ 53 ] Bug #1820157 - CVE-2020-6452 chromium-browser: Heap buffer overflow in media
https://bugzilla.redhat.com/show_bug.cgi?id=1820157
[ 54 ] Bug #1822604 - CVE-2020-6454 chromium-browser: Use after free in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1822604
[ 55 ] Bug #1822605 - CVE-2020-6423 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1822605
[ 56 ] Bug #1822606 - CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL
https://bugzilla.redhat.com/show_bug.cgi?id=1822606
[ 57 ] Bug #1822607 - CVE-2020-6430 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1822607
[ 58 ] Bug #1822608 - CVE-2020-6456 chromium-browser: Insufficient validation of
untrusted input in clipboard
https://bugzilla.redhat.com/show_bug.cgi?id=1822608
[ 59 ] Bug #1822609 - CVE-2020-6431 chromium-browser: Insufficient policy enforcement in
full screen
https://bugzilla.redhat.com/show_bug.cgi?id=1822609
[ 60 ] Bug #1822610 - CVE-2020-6433 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1822610
[ 61 ] Bug #1822611 - CVE-2020-6434 chromium-browser: Use after free in devtools
https://bugzilla.redhat.com/show_bug.cgi?id=1822611
[ 62 ] Bug #1822612 - CVE-2020-6435 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1822612
[ 63 ] Bug #1822613 - CVE-2020-6436 chromium-browser: Use after free in window
management
https://bugzilla.redhat.com/show_bug.cgi?id=1822613
[ 64 ] Bug #1822614 - CVE-2020-6437 chromium-browser: Inappropriate implementation in
WebView
https://bugzilla.redhat.com/show_bug.cgi?id=1822614
[ 65 ] Bug #1822615 - CVE-2020-6438 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1822615
[ 66 ] Bug #1822616 - CVE-2020-6439 chromium-browser: Insufficient policy enforcement in
navigations
https://bugzilla.redhat.com/show_bug.cgi?id=1822616
[ 67 ] Bug #1822617 - CVE-2020-6440 chromium-browser: Inappropriate implementation in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1822617
[ 68 ] Bug #1822618 - CVE-2020-6441 chromium-browser: Insufficient policy enforcement in
omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1822618
[ 69 ] Bug #1822619 - CVE-2020-6442 chromium-browser: Inappropriate implementation in
cache
https://bugzilla.redhat.com/show_bug.cgi?id=1822619
[ 70 ] Bug #1822620 - CVE-2020-6443 chromium-browser: Insufficient data validation in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1822620
[ 71 ] Bug #1822621 - CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1822621
[ 72 ] Bug #1822622 - CVE-2020-6445 chromium-browser: Insufficient policy enforcement in
trusted types
https://bugzilla.redhat.com/show_bug.cgi?id=1822622
[ 73 ] Bug #1822623 - CVE-2020-6446 chromium-browser: Insufficient policy enforcement in
trusted types
https://bugzilla.redhat.com/show_bug.cgi?id=1822623
[ 74 ] Bug #1822624 - CVE-2020-6447 chromium-browser: Inappropriate implementation in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1822624
[ 75 ] Bug #1822625 - CVE-2020-6448 chromium-browser: Use after free in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1822625
[ 76 ] Bug #1824949 - CVE-2020-6457 chromium-browser: Use after free in speech
recognizer
https://bugzilla.redhat.com/show_bug.cgi?id=1824949
[ 77 ] Bug #1827379 - CVE-2020-6459 chromium-browser: Use after free in payments
https://bugzilla.redhat.com/show_bug.cgi?id=1827379
[ 78 ] Bug #1827380 - CVE-2020-6460 chromium-browser: Insufficient data validation in
URL formatting
https://bugzilla.redhat.com/show_bug.cgi?id=1827380
[ 79 ] Bug #1827381 - CVE-2020-6458 chromium-browser: Out of bounds read and write in
PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1827381
[ 80 ] Bug #1828859 - CVE-2020-6462 chromium-browser: Use after free in task scheduling
https://bugzilla.redhat.com/show_bug.cgi?id=1828859
[ 81 ] Bug #1828860 - CVE-2020-6461 chromium-browser: Use after free in storage
https://bugzilla.redhat.com/show_bug.cgi?id=1828860
[ 82 ] Bug #1832488 - CVE-2020-6464 chromium-browser: Type Confusion in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1832488
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------