--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-c6c395c50a
2019-11-26 14:55:12.896703
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora EPEL 8
Version : 78.0.3904.87
Release : 1.el8
URL :
http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Update to chromium 78.0.3904.87, fixes CVE-2019-13720 & CVE-2019-13721. Also
fixes zip compression support in EL8 builds. ---- Chromium 78. Fixes these:
CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875
CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878
CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660
CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665
CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670
CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676
CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681
CVE-2019-13682 CVE-2019-13683
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.87-1
- update to 78.0.3904.87
- apply most of the freeworld changes in PR 23/24/25
* Wed Oct 23 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.80-1
- update to 78.0.3904.80
* Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-4
- upstream fix for zlib symbol exports with gcc
* Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-3
- silence outdated build noise (bz1745745)
* Tue Oct 15 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-2
- fix node handling for EPEL-8
* Mon Oct 14 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.120-1
- Update to 77.0.3865.120
* Thu Oct 10 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.90-4
- enable aarch64 for EPEL-8
* Wed Oct 9 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.90-3
- spec cleanups and changes to make EPEL8 try to build
* Mon Sep 23 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.90-2
- Fix the icon
- Remove quite a few of downstream patches
- Fix the crashes by backporting an upstream bug
- Resolves: rhbz#1754179
* Thu Sep 19 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.90-1
- Update to 77.0.3865.90
* Mon Sep 16 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.75-2
- Update the list of private libraries
* Fri Sep 13 2019 Tomas Popela <tpopela(a)redhat.com> - 77.0.3865.75-1
- Update to 77.0.3865.75
* Tue Sep 3 2019 Tomas Popela <tpopela(a)redhat.com> - 76.0.3809.132-2
- Backport patch to fix certificate transparency
* Tue Aug 27 2019 Tomas Popela <tpopela(a)redhat.com> - 76.0.3809.132-1
- Update to 76.0.3809.132
* Tue Aug 13 2019 Tomas Popela <tpopela(a)redhat.com> - 76.0.3809.100-1
- Update to 76.0.3809.100
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
75.0.3770.100-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Jul 2 2019 Tom Callaway <spot(a)fedoraproject.org> - 75.0.3770.100-3
- apply upstream fix to resolve issue where it is dangerous to post a
task with a RenderProcessHost pointer because the RenderProcessHost
can go away before the task is run (causing a segfault).
* Tue Jun 25 2019 Tom Callaway <spot(a)fedoraproject.org> - 75.0.3770.100-2
- fix v8 compile with gcc
* Thu Jun 20 2019 Tom Callaway <spot(a)fedoraproject.org> - 75.0.3770.100-1
- update to 75.0.3770.100
* Fri Jun 14 2019 Tom Callaway <spot(a)fedoraproject.org> - 75.0.3770.90-1
- update to 75.0.3770.90
* Wed Jun 5 2019 Tom Callaway <spot(a)fedoraproject.org> - 75.0.3770.80-1
- update to 75.0.3770.80
- disable vaapi (via conditional), too broken
* Fri May 31 2019 Tom Callaway <spot(a)fedoraproject.org> - 74.0.3729.169-1
- update to 74.0.3729.169
* Thu Apr 11 2019 Tom Callaway <spot(a)fedoraproject.org> - 73.0.3683.103-1
- update to 73.0.3683.103
- add CLONE_VFORK logic to seccomp filter for linux to handle glibc 2.29 change
* Wed Mar 27 2019 Tom Callaway <spot(a)fedoraproject.org> - 73.0.3683.86-2
- remove lang macro from en-US.pak* because Chromium crashes if it is not present
(bz1692660)
* Fri Mar 22 2019 Tom Callaway <spot(a)fedoraproject.org> - 73.0.3683.86-1
- update to 73.0.3683.86
* Tue Mar 19 2019 Tom Callaway <spot(a)fedoraproject.org> - 73.0.3683.75-2
- do not include pyproto/protoc files in package
* Tue Mar 12 2019 Tom Callaway <spot(a)fedoraproject.org> - 73.0.3683.75-1
- update to 73.0.3683.75
* Sat Mar 9 2019 Tom Callaway <spot(a)fedoraproject.org> - 72.0.3626.121-1
- update to 72.0.3626.121
* Tue Feb 26 2019 Tom Callaway <spot(a)fedoraproject.org> - 71.0.3578.98-5
- rebuild for libva api change
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
71.0.3578.98-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 21 2019 Tom Callaway <spot(a)fedoraproject.org> - 71.0.3578.98-3
- rebuild with widevine fix
* Tue Jan 8 2019 Tom Callaway <spot(a)fedoraproject.org> - 71.0.3578.98-2
- drop rsp clobber, which breaks gcc9 (thanks to Jeff Law)
* Fri Dec 14 2018 Tom Callaway <spot(a)fedoraproject.org> - 71.0.3578.98-1
- update to 71.0.3578.98
* Tue Nov 27 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.110-2
- enable vaapi support (thanks to Akarshan Biswas for doing the hard work here)
* Mon Nov 26 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.110-1
- update to .110
* Wed Nov 7 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-4
- fix library requires filtering
* Tue Nov 6 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-3
- fix build with harfbuzz2 in rawhide
* Mon Nov 5 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-2
- drop jumbo_file_merge_limit to 8 to (hopefully) avoid OOMs on aarch64
* Fri Nov 2 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-1
- .77 came out while I was working on this. :/
* Fri Nov 2 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.67-1
- update to 70
* Tue Oct 16 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.100-2
- do not play with fonts on freeworld builds
* Thu Oct 4 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.100-1
- update to 69.0.3497.100
* Wed Sep 12 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.92-1
- update to 69.0.3497.92
* Wed Sep 5 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.81-1
- update to 69.0.3497.81
* Tue Aug 28 2018 Patrik Novotn�� <panovotn(a)redhat.com> - 68.0.3440.106-4
- change requires to minizip-compat(-devel), rhbz#1609830, rhbz#1615381
* Sun Aug 19 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-3
- fix library filters
* Fri Aug 17 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-2
- fix error with defaulting on redeclaration
* Thu Aug 9 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-1
- update to 68.0.3440.106
* Wed Aug 8 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.84-1
- update to 68.0.3440.84
* Mon Jul 30 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.75-1
- update to 68.0.3440.75
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
67.0.3396.99-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 9 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.99-1
- update to 67.0.3396.99
* Mon Jun 25 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.87-2
- add "Fedora" to the user agent string
* Tue Jun 19 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.87-1
- update to 67.0.3396.87
* Thu Jun 7 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.79-1
- update to 67.0.3396.79
* Wed Jun 6 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.62-2
- work around bug in RHEL7 python exec
* Wed May 30 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.62-1
- 67 releases of chromium on the wall...
* Tue May 29 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-3
- also filter out fontconfig on epel7
* Wed May 23 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-2
- fix missing files
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-1
- update to 66.0.3359.181
* Tue May 15 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-2
- only x86_64 i686 have swiftshader
- fix gcc8 alignof issue on i686
* Mon May 14 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-1
- update to 66.0.3359.170
- include swiftshader files
* Tue May 1 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.139-1
- update to 66.0.3359.139
* Wed Apr 18 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.117-1
- update to 66.0.3359.117
* Tue Apr 17 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-3
- use system fontconfig (except on epel7)
* Wed Apr 4 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-2
- add explicit dependency on minizip (bz 1534282)
* Wed Mar 28 2018 Tom Callaway <spot(a)fedoraproject.org>
- check that there is no system 'google' module, shadowing bundled ones
- conditionalize api keys (on by default)
* Wed Mar 21 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-1
- update to 65.0.3325.181
* Mon Mar 19 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.162-3
- use bundled libdrm on epel7
* Fri Mar 16 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.162-2
- disable StartupNotify in chromium-browser.desktop (not in google-chrome desktop file)
(bz1545241)
- use bundled freetype on epel7
* Wed Mar 14 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.162-1
- update to 65.0.3325.162
* Wed Mar 7 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.146-1
- update to 65.0.3325.146
* Mon Mar 5 2018 Tom Callaway <spot(a)fedoraproject.org> 64.0.3282.186-1
- update to 64.0.3282.186
* Fri Feb 16 2018 Tom Callaway <spot(a)fedoraproject.org> 64.0.3282.167-1
- update to 64.0.3282.167
- include workaround for gcc8 bug in gn
- disable unnecessary aarch64 glibc symbol change
* Fri Feb 2 2018 Tom Callaway <spot(a)fedoraproject.org> 64.0.3282.140-1
- update to 64.0.3282.140
* Thu Feb 1 2018 Tom Callaway <spot(a)fedoraproject.org> 64.0.3282.119-2
- include user-session binary in chrome-remote-desktop subpackage
* Thu Jan 25 2018 Tom Callaway <spot(a)fedoraproject.org> 64.0.3282.119-1
- update to 64.0.3282.119
* Fri Dec 15 2017 Tomas Popela <tpopela(a)redhat.com> 63.0.3239.108-1
- Update to 63.0.3239.108
* Thu Dec 7 2017 Tom Callaway <spot(a)fedoraproject.org> 63.0.3239.84-1
- update to 63.0.3239.84
* Wed Nov 8 2017 Tom Callaway <spot(a)fedoraproject.org> 62.0.3202.89-1
- update to 62.0.3202.89
* Fri Oct 27 2017 Tom Callaway <spot(a)fedoraproject.org> 62.0.3202.75-1
- update to 62.0.3202.75
- use devtoolset-7-toolchain to build on epel7
* Tue Oct 24 2017 Tom Callaway <spot(a)fedoraproject.org> 62.0.3202.62-1.1
- do not attempt std=c++14 on epel7
* Wed Oct 18 2017 Tom Callaway <spot(a)fedoraproject.org> 62.0.3202.62-1
- update to 62.0.3202.62
* Fri Sep 22 2017 Tom Callaway <spot(a)fedoraproject.org> 61.0.3163.100-1
- update to 61.0.3163.100
- lots of epel7 specific fixes
- use bundled libpng on epel7
* Wed Sep 6 2017 Tom Callaway <spot(a)fedoraproject.org> 61.0.3163.79-1
- update to 61.0.3163.79
* Mon Aug 28 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.113-2
- disable aarch64 on rhel7, missing libatomic.so for some reason
* Wed Aug 23 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.113-1
- fix ffmpeg clean script to not delete aarch64 file
- update to 60.0.3112.113
* Wed Aug 23 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.101-3
- apply aarch64 fixes from Ryan Blakely <rblakely(a)redhat.com>
* Thu Aug 17 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.101-2
- fix dep issue with chrome-remote-desktop on el7
* Wed Aug 16 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.101-1
- update to 60.0.3112.101
- apply upstream fix for cameras which report zero resolution formats
(bz1465357)
* Mon Aug 14 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.90-3
- apply more workarounds to coax code to build with epel7 gcc
* Wed Aug 9 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.90-2
- apply post 60 code commit to get code building on epel7
* Fri Aug 4 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.90-1
- update to 60.0.3112.90
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
59.0.3071.115-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Mon Jul 31 2017 Tom Callaway <spot(a)fedoraproject.org> 60.0.3112.78-1
- update to 60.0.3112.78
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
59.0.3071.115-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Jul 21 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.115-4
- put common files in -common subpackage
- build headless_shell for -headless subpackage
* Fri Jul 21 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.115-3
- use posttrans to ensure that old libs are gone before trying to make alternative
symlinks
* Thu Jul 13 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.115-2
- fix scriptlets
* Wed Jul 12 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.115-1
- 59.0.3071.115
- conditionalize spec so it can be easily used to make -libs-media-freeworld
* Wed Jun 28 2017 Dominik Mierzejewski <dominik(a)greysector.net> 59.0.3071.109-6
- use alternatives for widevine stub and media libs to allow third-party
packages to replace them without conflicts
* Mon Jun 26 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.109-5
- fix path in pretrans scriptlet
* Fri Jun 23 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.109-4
- copy files into /etc/opt/chrome/native-messaging-hosts instead of making symlinks
this results in duplicate copies of the same files, but eh. making rpm happy.
* Fri Jun 23 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.109-3
- use pretrans scriptlet to remove symlink on /etc/opt/chrome/native-messaging-hosts
(it is now a directory)
* Thu Jun 22 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.109-2
- fix duplication between chrome-remote-desktop and chromium
* Thu Jun 22 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.109-1
- update to .109
- fix native-messaging-hosts dir to be a true dir instead of a symlink
* Fri Jun 16 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.104-1
- update to .104
* Fri Jun 16 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.86-4
- actually fix mp3 playback support
* Tue Jun 13 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.86-3
- fix filtering
* Mon Jun 12 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.86-2
- pnacl/nacl now needs llvm to build the bootstrap lib
* Mon Jun 12 2017 Tom Callaway <spot(a)fedoraproject.org> 59.0.3071.86-1
- update to 59.0.3071.86
- include smaller logo files
* Tue May 16 2017 Tom Callaway <spot(a)fedoraproject.org> 58.0.3029.110-2
- strip provides/requires on libsensors
* Mon May 15 2017 Tom Callaway <spot(a)fedoraproject.org> 58.0.3029.110-1
- update to 58.0.3029.110
* Mon May 8 2017 Tom Callaway <spot(a)fedoraproject.org> 58.0.3029.96-1
- update to 58.0.3029.96
* Fri Apr 21 2017 Tom Callaway <spot(a)fedoraproject.org> 58.0.3029.81-1
- update to 58.0.3029.81
* Thu Mar 30 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.133-1
- update to 57.0.2987.133
* Sun Mar 26 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.110-4
- copy compat stdatomic.h in for RHEL. Re-enable mp3 enablement.
- fix issue in gtk_ui.cc revealed by RHEL build
* Sun Mar 26 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.110-3
- fix mp3 enablement
- disable mp3 enablement on RHEL (compiler too old)
* Tue Mar 21 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.110-2
- fix privlibs
* Mon Mar 20 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.110-1
- update to 57.0.2987.110
* Tue Mar 14 2017 Tom Callaway <spot(a)fedoraproject.org> 57.0.2987.98-1
- update to 57.0.2987.98
* Sun Mar 5 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-8
- enable mp3 support
* Sat Mar 4 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-7
- fix desktop file to have "new window" and "new private window"
actions
* Tue Feb 28 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-6
- fix issue with gcc7 compile in v8 (thanks to Ben Noordhuis)
* Fri Feb 24 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-5
- versioning sync build on rawhide
* Fri Feb 24 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-4.1
- fix issue with unique_ptr move on return with old gcc
* Tue Feb 21 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-4
- disable debuginfo
* Mon Feb 13 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-3
- fix compilation issue
- build third_party/WebKit with -fpermissive
- use bundled jinja everywhere
* Fri Feb 10 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-2
- add BR: gtk3-devel
* Fri Feb 10 2017 Tom Callaway <spot(a)fedoraproject.org> 56.0.2924.87-1
- update to 56.0.2924.87
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
55.0.2883.87-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Tue Dec 13 2016 Tom Callaway <spot(a)fedoraproject.org> 55.0.2883.87-1.1
- use bundled jinja2 on RHEL (or Fedora older than 23)
- fix rvalue issue in remoting code
* Tue Dec 13 2016 Tom Callaway <spot(a)fedoraproject.org> 55.0.2883.87-1
- update to 55.0.2883.87
* Mon Dec 12 2016 Tom Callaway <spot(a)fedoraproject.org> 55.0.2883.75-1
- update to 55.0.2883.75
* Fri Dec 2 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.100-1
- update to 54.0.2840.100
* Fri Nov 4 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.90-3
- when use_aura is on, chrome/browser needs to link to ui/snapshot
* Wed Nov 2 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.90-2
- export setOpaque in cc_blink
* Wed Nov 2 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.90-1
- update to 54.0.2840.90
- undo ld manipulation for i686, just use -g1 there
* Tue Nov 1 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.71-2
- disable debugging
* Wed Oct 26 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.71-1
- update to 54.0.2840.71
* Wed Oct 26 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.59-2
- fix deps
* Thu Oct 13 2016 Tom Callaway <spot(a)fedoraproject.org> 54.0.2840.59-1
- 54.0.2840.59
- use bundled opus, libevent
* Fri Sep 30 2016 Tom Callaway <spot(a)fedoraproject.org> 53.0.2785.143-1
- 53.0.2785.143
* Tue Sep 20 2016 Tom Callaway <spot(a)fedoraproject.org> 53.0.2785.116-1
- 53.0.2785.116
* Wed Sep 14 2016 Tom Callaway <spot(a)fedoraproject.org> 53.0.2785.113-1
- 53.0.2785.113
* Thu Sep 8 2016 Tom Callaway <spot(a)fedoraproject.org> 53.0.2785.101-1
- 53.0.2785.101
- happy star trek day. live long and prosper.
* Wed Sep 7 2016 Tom Callaway <spot(a)fedoraproject.org> 53.0.2785.92-1
- add basic framework for gn tooling (disabled because it doesn't work yet)
- update to 53.0.2785.92
- fix HOME environment issue in chrome-remote-desktop service file
* Mon Aug 29 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-11
- conditionalize Requires: u2f-hidraw-policy so that it is only used on Fedora
- use bundled harfbuzz on EL7
* Thu Aug 18 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-10
- disable gtk3 because it breaks lots of things
- re-enable hidpi setting
* Tue Aug 16 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-9
- filter out Requires/Provides for chromium-only libs and plugins
* Tue Aug 16 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-8
- fix path on Requires(post) line for semanage
* Mon Aug 15 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-7
- add Requires(post) items for selinux scriptlets
* Mon Aug 15 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-6
- disable the "hidpi" setting
- unset MADV_FREE if set (should get F25+ working again)
* Fri Aug 12 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-5
- do not package libwidevinecdm*.so, they are just empty shells
instead, to enable widevine, get these files from Google Chrome
* Fri Aug 12 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-4
- add "freeworld" conditional for testing netflix/widevine
* Fri Aug 12 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-3
- move PepperFlash directory out of the nacl conditional (thanks to churchyard)
- fix widevine (thanks to David V��squez and UnitedRPMS)
* Wed Aug 10 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-2
- include clearkeycdm and widevinecdm files in libs-media
* Mon Aug 8 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.116-1
- update to 52.0.2743.116
* Thu Aug 4 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-13
- change libs split to "libs-media", as that actually works.
- add PepperFlash directory (nothing in it though, sorry)
* Wed Aug 3 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-12
- split out libs package beyond ffmpeg, into libs and libs-content
- fix libusbx conditional for el7 to not nuke libusb headers
- disable speech-dispatcher header prefix setting if not fedora (el7)
* Wed Aug 3 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-11
- split out chromium-libs-ffmpeg so it can be easily replaced
- conditionalize opus and libusbx for el7
* Wed Aug 3 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-10
- Add ICU Text Codec aliases (from openSUSE via Russian Fedora)
- Use PIE in the Linux sandbox (from openSUSE via Russian Fedora)
- Enable ARM CPU detection for webrtc (from archlinux via Russian Fedora)
- Do not force -m32 in icu compile on ARM (from archlinux via Russian Fedora)
- Enable gtk3 support (via conditional)
- Enable fpic on linux
- Enable hidpi
- Force aura on
- Enable touch_ui
- Add chromedriver subpackage (from Russian Fedora)
- Set default master_preferences location to /etc/chromium
- Add master_preferences file as config file
- Improve chromium-browser.desktop (from Russian Fedora)
* Thu Jul 28 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-9
- fix conditional to disable verbose logging output unless beta/dev
* Thu Jul 28 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-8
- disable nacl/pnacl for Fedora 23 (and older)
* Thu Jul 28 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-7
- fix post scriptlet so that selinux stuff only happens when selinux is enabled
* Thu Jul 28 2016 Richard Hughes <richard(a)hughsie.com> 52.0.2743.82-6
- Add an AppData file so that Chromium appears in the software center
* Wed Jul 27 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-5
- enable nacl/pnacl (chromium-native_client has landed in Fedora)
- fix chromium-browser.sh to report Fedora build target properly
* Wed Jul 27 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-4
- compile with -fno-delete-null-pointer-checks (fixes v8 crashes, nacl/pnacl)
- turn nacl/pnacl off until chromium-native_client lands in Fedora
* Tue Jul 26 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-3
- turn nacl back on for x86_64
* Thu Jul 21 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-2
- fix cups 2.2 support
- try to enable widevine compatibility (you still need to get the binary .so files from
chrome)
* Thu Jul 21 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.82-1
- update to 52.0.2743.82
- handle locales properly
- cleanup spec
* Tue Jul 19 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.75-1
- update to 52.0.2743.75
* Wed Jul 6 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2743.60-1
- bump to 52.0.2743.60, disable nacl for now
* Mon May 9 2016 Tom Callaway <spot(a)fedoraproject.org> 52.0.2723.2-1
- force to dev to see if it works better on F24+
* Wed May 4 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-6
- apply upstream fix for
https://bugs.chromium.org/p/chromium/issues/detail?id=604534
* Tue May 3 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-5
- use bundled re2 (conditionalize it)
* Tue May 3 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-4
- disable asan (it never quite built)
- do not preserve re2 bundled tree, causes header/library mismatch
* Mon May 2 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-3
- enable AddressSanize (ASan) for debugging
* Sat Apr 30 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-2
- use bundled icu always. *sigh*
* Fri Apr 29 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.94-1
- update to 50.0.2661.94
* Wed Apr 27 2016 Tom Callaway <spot(a)fedoraproject.org> 50.0.2661.86-1
- update to 50.0.2661.86
* Thu Mar 17 2016 Tom Callaway <spot(a)fedoraproject.org> 49.0.2623.87-4
- protect third_party/woff2
* Thu Mar 17 2016 Tom Callaway <spot(a)fedoraproject.org> 49.0.2623.87-3
- add BuildRequires: libffi-devel
* Thu Mar 17 2016 Tom Callaway <spot(a)fedoraproject.org> 49.0.2623.87-2
- explicitly disable sysroot
* Thu Mar 17 2016 Tom Callaway <spot(a)fedoraproject.org> 49.0.2623.87-1
- update to 49.0.2623.87
* Mon Feb 29 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.116-3
- Happy Leap Day!
- add Requires: u2f-hidraw-policy for u2f token support
- add Requires: xorg-x11-server-Xvfb for chrome-remote-desktop
* Fri Feb 26 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.116-2
- fix icu BR
* Wed Feb 24 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.116-1
- Update to 48.0.2564.116
- conditionalize icu properly
- fix libusbx handling (bz1270324)
* Wed Feb 17 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.103-2
- fixes for gcc6
* Mon Feb 8 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.103-1
- update to 48.0.2564.103
- use bundled libsrtp (because upstream has coded themselves into an ugly corner)
* Fri Jan 22 2016 Tom Callaway <spot(a)fedoraproject.org> 48.0.2564.82-1
- update to 48.0.2564.82
* Fri Jan 15 2016 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.111-1
- update to 47.0.2526.111
* Thu Jan 7 2016 Tomas Popela <tpopela(a)redhat.com> 47.0.2526.106-2
- compare hashes when downloading the tarballs
- Google started to include the Debian sysroots in tarballs - remove them while
processing the tarball
- add a way to not use the system display server for tests instead of Xvfb
- update the depot_tools checkout to get some GN fixes
- use the remove_bundled_libraries script
- update the clean_ffmpeg script to print errors when some files that we are
processing are missing
- update the clean_ffmpeg script to operate on tarball's toplevel folder
- don't show comments as removed tests in get_linux_tests_names script
- rework the process_ffmpeg_gyp script (also rename it to
get_free_ffmpeg_source_files) to use the GN files insted of GYP (but we still
didn't switched to GN build)
* Wed Dec 16 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.106-1
- update to 47.0.2526.106
* Tue Dec 15 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.80-4
- entirely patch out the broken fd counter from the nacl loader code
killing it with fire would be better, but then chromium is on fire
and that somehow makes it worse.
* Mon Dec 14 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.80-3
- revert nacl fd patch (now we see 6 fds! 6 LIGHTS!)
* Fri Dec 11 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.80-2
- build everything shared, but when we do shared builds, make -libs subpackage
- make chrome-remote-desktop dep on -libs subpackage in shared builds
* Wed Dec 9 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.80-1
- update to 47.0.2526.80
- only build ffmpeg shared, not any other libs
this is because if we build the other libs shared, then our
chrome-remote-desktop build deps on those libs and we do not want that
* Tue Dec 8 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.73-2
- The nacl loader claims it sees 7 fds open ALL THE TIME, and fails
So, we tell it that it is supposed to see 7.
I suspect building with shared objects is causing this disconnect.
* Wed Dec 2 2015 Tom Callaway <spot(a)fedoraproject.org> 47.0.2526.73-1
- update to 47.0.2526.73
- rework chrome-remote-desktop subpackage to work for google-chrome and chromium
* Wed Dec 2 2015 Tomas Popela <tpopela(a)redhat.com> 47.0.2526.69-1
- Update to 47.0.2526.69
* Tue Dec 1 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.86-4
- still more remote desktop changes
* Mon Nov 30 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.86-3
- lots of remote desktop cleanups
* Thu Nov 12 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.86-2
- re-enable Requires/BuildRequires for libusbx
- add remote-desktop subpackage
* Wed Nov 11 2015 Tomas Popela <tpopela(a)redhat.com> 46.0.2490.86-1
- update to 46.0.2490.86
- clean the SPEC file
- add support for policies:
https://www.chromium.org/administrators/linux-quick-start
- replace exec_mem_t SELinux label with bin_t - see rhbz#1281437
- refresh scripts that are used for processing the original tarball
* Fri Oct 30 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.80-5
- tls_edit is a nacl thing. who knew?
* Thu Oct 29 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.80-4
- more nacl fixups for i686 case
* Thu Oct 29 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.80-3
- conditionalize nacl/nonacl, disable nacl on i686, build for i686
* Mon Oct 26 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.80-2
- conditionalize shared bits (enable by default)
* Fri Oct 23 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.80-1
- update to 46.0.2490.80
* Thu Oct 15 2015 Tom Callaway <spot(a)fedoraproject.org> 46.0.2490.71-1
- update to 46.0.2490.71
* Thu Oct 15 2015 Tom Callaway <spot(a)fedoraproject.org> 45.0.2454.101-2
- fix icu handling for f21 and older
* Mon Oct 5 2015 Tom Callaway <spot(a)fedoraproject.org> 45.0.2454.101-1
- update to 45.0.2454.101
* Thu Jun 11 2015 Tom Callaway <spot(a)fedoraproject.org> 43.0.2357.124-1
- update to 43.0.2357.124
* Tue Jun 2 2015 Tom Callaway <spot(a)fedoraproject.org> 43.0.2357.81-1
- update to 43.0.2357.81
* Thu Feb 26 2015 Tom Callaway <spot(a)fedoraproject.org> 40.0.2214.115-1
- update to 40.0.2214.115
* Thu Feb 19 2015 Tom Callaway <spot(a)fedoraproject.org> 40.0.2214.111-1
- update to 40.0.2214.111
* Mon Feb 2 2015 Tom Callaway <spot(a)fedoraproject.org> 40.0.2214.94-1
- update to 40.0.2214.94
* Tue Jan 27 2015 Tom Callaway <spot(a)fedoraproject.org> 40.0.2214.93-1
- update to 40.0.2214.93
* Sat Jan 24 2015 Tom Callaway <spot(a)fedoraproject.org> 40.0.2214.91-1
- update to 40.0.2214.91
* Wed Jan 21 2015 Tom Callaway <spot(a)fedoraproject.org> 39.0.2171.95-3
- use bundled icu on Fedora < 21, we need 5.2
* Tue Jan 6 2015 Tom Callaway <spot(a)fedoraproject.org> 39.0.2171.95-2
- rebase off Tomas's spec file for Fedora
* Fri Dec 12 2014 Tomas Popela <tpopela(a)redhat.com> 39.0.2171.95-1
- Update to 39.0.2171.95
- Resolves: rhbz#1173448
* Wed Nov 26 2014 Tomas Popela <tpopela(a)redhat.com> 39.0.2171.71-1
- Update to 39.0.2171.71
- Resolves: rhbz#1168128
* Wed Nov 19 2014 Tomas Popela <tpopela(a)redhat.com> 39.0.2171.65-2
- Revert the chrome-sandbox rename to chrome_sandbox
- Resolves: rhbz#1165653
* Wed Nov 19 2014 Tomas Popela <tpopela(a)redhat.com> 39.0.2171.65-1
- Update to 39.0.2171.65
- Use Red Hat Developer Toolset for compilation
- Set additional SELinux labels
- Add more unit tests
- Resolves: rhbz#1165653
* Fri Nov 14 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.122-1
- Update to 38.0.2125.122
- Resolves: rhbz#1164116
* Wed Oct 29 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.111-1
- Update to 38.0.2125.111
- Resolves: rhbz#1158347
* Fri Oct 24 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.104-2
- Fix the situation when the return key (and keys from numpad) does not work
in HTML elements with input
- Resolves: rhbz#1153988
- Dynamically determine the presence of the PepperFlash plugin
- Resolves: rhbz#1154118
* Thu Oct 16 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.104-1
- Update to 38.0.2125.104
- Resolves: rhbz#1153012
* Thu Oct 9 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.101-2
- The boringssl is used for tests, without the possibility of using
the system openssl instead. Remove the openssl and boringssl sources
when not building the tests.
- Resolves: rhbz#1004948
* Wed Oct 8 2014 Tomas Popela <tpopela(a)redhat.com> 38.0.2125.101-1
- Update to 38.0.2125.101
- System openssl is used for tests, otherwise the bundled boringssl is used
- Don't build with clang
- Resolves: rhbz#1004948
* Wed Sep 10 2014 Tomas Popela <tpopela(a)redhat.com> 37.0.2062.120-1
- Update to 37.0.2062.120
- Resolves: rhbz#1004948
* Wed Aug 27 2014 Tomas Popela <tpopela(a)redhat.com> 37.0.2062.94-1
- Update to 37.0.2062.94
- Include the pdf viewer library
* Wed Aug 13 2014 Tomas Popela <tpopela(a)redhat.com> 36.0.1985.143-1
- Update to 36.0.1985.143
- Use system openssl instead of bundled one
- Resolves: rhbz#1004948
* Thu Jul 17 2014 Tomas Popela <tpopela(a)redhat.com> 36.0.1985.125-1
- Update to 36.0.1985.125
- Add libexif as BR
- Resolves: rhbz#1004948
* Wed Jun 11 2014 Tomas Popela <tpopela(a)redhat.com> 35.0.1916.153-1
- Update to 35.0.1916.153
- Resolves: rhbz#1004948
* Wed May 21 2014 Tomas Popela <tpopela(a)redhat.com> 35.0.1916.114-1
- Update to 35.0.1916.114
- Bundle python-argparse
- Resolves: rhbz#1004948
* Wed May 14 2014 Tomas Popela <tpopela(a)redhat.com> 34.0.1847.137-1
- Update to 34.0.1847.137
- Resolves: rhbz#1004948
* Mon May 5 2014 Tomas Popela <tpopela(a)redhat.com> 34.0.1847.132-1
- Update to 34.0.1847.132
- Bundle depot_tools and switch from make to ninja
- Remove PepperFlash
- Resolves: rhbz#1004948
* Mon Feb 3 2014 Tomas Popela <tpopela(a)redhat.com> 32.0.1700.102-1
- Update to 32.0.1700.102
* Thu Jan 16 2014 Tomas Popela <tpopela(a)redhat.com> 32.0.1700.77-1
- Update to 32.0.1700.77
- Properly kill Xvfb when tests fails
- Add libdrm as BR
- Add libcap as BR
* Tue Jan 7 2014 Tomas Popela <tpopela(a)redhat.com> 31.0.1650.67-2
- Minor changes in spec files and scripts
- Add Xvfb as BR for tests
- Add policycoreutils-python as Requires
- Compile unittests and run them in chech phase, but turn them off by default
as many of them are failing in Brew
* Thu Dec 5 2013 Tomas Popela <tpopela(a)redhat.com> 31.0.1650.67-1
- Update to 31.0.1650.63
* Thu Nov 21 2013 Tomas Popela <tpopela(a)redhat.com> 31.0.1650.57-1
- Update to 31.0.1650.57
* Wed Nov 13 2013 Tomas Popela <tpopela(a)redhat.com> 31.0.1650.48-1
- Update to 31.0.1650.48
- Minimal supported RHEL6 version is now RHEL 6.5 due to GTK+
* Fri Oct 25 2013 Tomas Popela <tpopela(a)redhat.com> 30.0.1599.114-1
- Update to 30.0.1599.114
- Hide the infobar with warning that this version of OS is not supported
- Polished the chromium-latest.py
* Thu Oct 17 2013 Tomas Popela <tpopela(a)redhat.com> 30.0.1599.101-1
- Update to 30.0.1599.101
- Minor changes in scripts
* Wed Oct 2 2013 Tomas Popela <tpopela(a)redhat.com> 30.0.1599.66-1
- Update to 30.0.1599.66
- Automated the script for cleaning the proprietary sources from ffmpeg.
* Thu Sep 19 2013 Tomas Popela <tpopela(a)redhat.com> 29.0.1547.76-1
- Update to 29.0.1547.76
- Added script for removing the proprietary sources from ffmpeg. This script is called
during cleaning phase of ./chromium-latest --rhel
* Mon Sep 16 2013 Tomas Popela <tpopela(a)redhat.com> 29.0.1547.65-2
- Compile with Dproprietary_codecs=0 and Dffmpeg_branding=Chromium to disable proprietary
codecs (i.e. MP3)
* Mon Sep 9 2013 Tomas Popela <tpopela(a)redhat.com> 29.0.1547.65-1
- Initial version based on Tom Callaway's <spot(a)fedoraproject.org> work
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1768578 - CVE-2019-13721 chromium-browser: use-after-free in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1768578
[ 2 ] Bug #1768586 - CVE-2019-13720 chromium-browser: use-after-free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1768586
[ 3 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762402
[ 4 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions
https://bugzilla.redhat.com/show_bug.cgi?id=1762401
[ 5 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers
https://bugzilla.redhat.com/show_bug.cgi?id=1762400
[ 6 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing
https://bugzilla.redhat.com/show_bug.cgi?id=1762399
[ 7 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing
https://bugzilla.redhat.com/show_bug.cgi?id=1762398
[ 8 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to
be isolated
https://bugzilla.redhat.com/show_bug.cgi?id=1762397
[ 9 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate
warning
https://bugzilla.redhat.com/show_bug.cgi?id=1762396
[ 10 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by
trailing slash
https://bugzilla.redhat.com/show_bug.cgi?id=1762395
[ 11 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing
https://bugzilla.redhat.com/show_bug.cgi?id=1762394
[ 12 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak
using devtools
https://bugzilla.redhat.com/show_bug.cgi?id=1762393
[ 13 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin
https://bugzilla.redhat.com/show_bug.cgi?id=1762392
[ 14 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex
https://bugzilla.redhat.com/show_bug.cgi?id=1762391
[ 15 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762390
[ 16 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console
https://bugzilla.redhat.com/show_bug.cgi?id=1762389
[ 17 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external
app URIs
https://bugzilla.redhat.com/show_bug.cgi?id=1762388
[ 18 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size
estimate
https://bugzilla.redhat.com/show_bug.cgi?id=1762387
[ 19 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection
bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762386
[ 20 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762385
[ 21 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762384
[ 22 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762383
[ 23 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762382
[ 24 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap
https://bugzilla.redhat.com/show_bug.cgi?id=1762381
[ 25 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762380
[ 26 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader
https://bugzilla.redhat.com/show_bug.cgi?id=1762379
[ 27 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762378
[ 28 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local
files
https://bugzilla.redhat.com/show_bug.cgi?id=1762377
[ 29 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1762376
[ 30 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1762375
[ 31 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1762374
[ 32 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762373
[ 33 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762372
[ 34 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download
redirect
https://bugzilla.redhat.com/show_bug.cgi?id=1762371
[ 35 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other
browsers
https://bugzilla.redhat.com/show_bug.cgi?id=1762370
[ 36 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo
https://bugzilla.redhat.com/show_bug.cgi?id=1762368
[ 37 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1762367
[ 38 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1762366
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------