--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-fd194a1f14
2018-11-30 02:08:41.608381
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora 28
Version : 70.0.3538.110
Release : 1.fc28
URL :
http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110. ----
Update to chromium 70.0.3538.77. Fixes CVE-2018-16435 CVE-2018-17462
CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467
CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17473
CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-5179 CVE-2018-17477
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.110-1
- update to .110
* Wed Nov 7 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-4
- fix library requires filtering
* Tue Nov 6 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-3
- fix build with harfbuzz2 in rawhide
* Mon Nov 5 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-2
- drop jumbo_file_merge_limit to 8 to (hopefully) avoid OOMs on aarch64
* Fri Nov 2 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.77-1
- .77 came out while I was working on this. :/
* Fri Nov 2 2018 Tom Callaway <spot(a)fedoraproject.org> - 70.0.3538.67-1
- update to 70
* Tue Oct 16 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.100-2
- do not play with fonts on freeworld builds
* Thu Oct 4 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.100-1
- update to 69.0.3497.100
* Wed Sep 12 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.92-1
- update to 69.0.3497.92
* Wed Sep 5 2018 Tom Callaway <spot(a)fedoraproject.org> - 69.0.3497.81-1
- update to 69.0.3497.81
* Tue Aug 28 2018 Patrik Novotn�� <panovotn(a)redhat.com> - 68.0.3440.106-4
- change requires to minizip-compat(-devel), rhbz#1609830, rhbz#1615381
* Sun Aug 19 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-3
- fix library filters
* Fri Aug 17 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-2
- fix error with defaulting on redeclaration
* Thu Aug 9 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.106-1
- update to 68.0.3440.106
* Wed Aug 8 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.84-1
- update to 68.0.3440.84
* Mon Jul 30 2018 Tom Callaway <spot(a)fedoraproject.org> - 68.0.3440.75-1
- update to 68.0.3440.75
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
67.0.3396.99-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 9 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.99-1
- update to 67.0.3396.99
* Mon Jun 25 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.87-2
- add "Fedora" to the user agent string
* Tue Jun 19 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.87-1
- update to 67.0.3396.87
* Thu Jun 7 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.79-1
- update to 67.0.3396.79
* Wed Jun 6 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.62-2
- work around bug in RHEL7 python exec
* Wed May 30 2018 Tom Callaway <spot(a)fedoraproject.org> 67.0.3396.62-1
- 67 releases of chromium on the wall...
* Tue May 29 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-3
- also filter out fontconfig on epel7
* Wed May 23 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-2
- fix missing files
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.181-1
- update to 66.0.3359.181
* Tue May 15 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-2
- only x86_64 i686 have swiftshader
- fix gcc8 alignof issue on i686
* Mon May 14 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.170-1
- update to 66.0.3359.170
- include swiftshader files
* Tue May 1 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.139-1
- update to 66.0.3359.139
* Wed Apr 18 2018 Tom Callaway <spot(a)fedoraproject.org> 66.0.3359.117-1
- update to 66.0.3359.117
* Tue Apr 17 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-3
- use system fontconfig (except on epel7)
* Wed Apr 4 2018 Tom Callaway <spot(a)fedoraproject.org> 65.0.3325.181-2
- add explicit dependency on minizip (bz 1534282)
* Wed Mar 28 2018 Tom Callaway <spot(a)fedoraproject.org>
- check that there is no system 'google' module, shadowing bundled ones
- conditionalize api keys (on by default)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651487 - CVE-2018-17479 chromium-browser: Use-after-free in GPU
https://bugzilla.redhat.com/show_bug.cgi?id=1651487
[ 2 ] Bug #1648855 - CVE-2018-17478 chromium-browser: Out of bounds memory access in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1648855
[ 3 ] Bug #1640118 - chromium-browser: Heap buffer overflow in lcms in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1640118
[ 4 ] Bug #1640115 - CVE-2018-17477 chromium-browser: UI spoof in Extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1640115
[ 5 ] Bug #1640114 - CVE-2018-5179 chromium-browser: Lack of limits on update() in
ServiceWorker
https://bugzilla.redhat.com/show_bug.cgi?id=1640114
[ 6 ] Bug #1640113 - CVE-2018-17476 chromium-browser: Security UI occlusion in full
screen mode
https://bugzilla.redhat.com/show_bug.cgi?id=1640113
[ 7 ] Bug #1640112 - CVE-2018-17475 chromium-browser: URL spoof in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1640112
[ 8 ] Bug #1640111 - CVE-2018-17474 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1640111
[ 9 ] Bug #1640110 - CVE-2018-17473 chromium-browser: URL spoof in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1640110
[ 10 ] Bug #1640108 - CVE-2018-17472 chromium-browser: iframe sandbox escape on iOS
https://bugzilla.redhat.com/show_bug.cgi?id=1640108
[ 11 ] Bug #1640107 - CVE-2018-17471 chromium-browser: Security UI occlusion in full
screen mode
https://bugzilla.redhat.com/show_bug.cgi?id=1640107
[ 12 ] Bug #1640106 - CVE-2018-17470 chromium-browser: Memory corruption in GPU
Internals
https://bugzilla.redhat.com/show_bug.cgi?id=1640106
[ 13 ] Bug #1640105 - CVE-2018-17469 chromium-browser: Heap buffer overflow in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1640105
[ 14 ] Bug #1640104 - CVE-2018-17468 chromium-browser: Cross-origin URL disclosure in
Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1640104
[ 15 ] Bug #1640103 - CVE-2018-17467 chromium-browser: URL spoof in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1640103
[ 16 ] Bug #1640102 - CVE-2018-17466 chromium-browser: Memory corruption in Angle
https://bugzilla.redhat.com/show_bug.cgi?id=1640102
[ 17 ] Bug #1640101 - CVE-2018-17465 chromium-browser: Use after free in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1640101
[ 18 ] Bug #1640100 - CVE-2018-17464 chromium-browser: URL spoof in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1640100
[ 19 ] Bug #1640099 - CVE-2018-17463 chromium-browser: Remote code execution in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1640099
[ 20 ] Bug #1640098 - CVE-2018-17462 chromium-browser: Sandbox escape in AppCache
https://bugzilla.redhat.com/show_bug.cgi?id=1640098
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-fd194a1f14' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------