| Summary: | chromium-browser-stable security issues fixed in 78.0.3904.108 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Christiaan Welvaart <cjw> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, brtians1, cjw, sysadmin-bugs, tmb |
| Version: | 7 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA7-32-OK, MGA7-64-OK | ||
| Source RPM: | chromium-browser-stable-78.0.3904.87-1.mga7.src.rpm | CVE: | |
| Status comment: | |||
|
Description
Christiaan Welvaart
2019-11-24 00:33:16 CET
Updated packages are available for testing: MGA7 SRPM: chromium-browser-stable-78.0.3904.108-1.mga7.src.rpm RPMS: chromium-browser-78.0.3904.108-1.mga7.i586.rpm chromium-browser-stable-78.0.3904.108-1.mga7.i586.rpm chromium-browser-78.0.3904.108-1.mga7.x86_64.rpm chromium-browser-stable-78.0.3904.108-1.mga7.x86_64.rpm Advisory: Chromium-browser 78.0.3904.108 fixes security issues: Multiple flaws were found in the way Chromium 78.0.3904.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-13723, CVE-2019-13724) References: https://chromereleases.googleblog.com/2019/11/stable-channel-update-for-desktop.html https://chromereleases.googleblog.com/2019/11/stable-channel-update-for-desktop_18.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13723 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13724 Assignee:
cjw =>
qa-bugs To satisfy dependencies, the following package(s) also need to be installed: - chromium-browser-stable-78.0.3904.108-1.mga7.x86_64 - lib64jsoncpp19-1.8.4-2.mga7.x86_64 - lib64minizip1-1.2.11-7.mga7.x86_64 - lib64snappy1-1.1.7-2.mga7.x86_64 -- installed browsed some website and watched youtube. Will keep testing, but looks good to me CC:
(none) =>
brtians1 (In reply to Brian Rockwell from comment #2) > To satisfy dependencies, the following package(s) also need to be installed: > > - chromium-browser-stable-78.0.3904.108-1.mga7.x86_64 > - lib64jsoncpp19-1.8.4-2.mga7.x86_64 > - lib64minizip1-1.2.11-7.mga7.x86_64 > - lib64snappy1-1.1.7-2.mga7.x86_64 > > -- > > installed > > browsed some website and watched youtube. Will keep testing, but looks good > to me I've used it for several hours on multiple functions. Seems to be working as deisgned to me (GNOME desktop). $ uname -a Linux localhost 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 23:07:33 UTC 2019 i686 i686 i386 GNU/Linux The following 4 packages are going to be installed: - chromium-browser-78.0.3904.108-1.mga7.i586 - chromium-browser-stable-78.0.3904.108-1.mga7.i586 - glibc-2.29-19.mga7.i586 - libjsoncpp19-1.8.4-2.mga7.i586 ---- I rebooted because of glibc install. --- Browsed some websites, including this one, played a video, seems to be working. Whiteboard:
(none) =>
MGA7-32-OK (In reply to Brian Rockwell from comment #4) > $ uname -a > Linux localhost 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 23:07:33 UTC 2019 > i686 i686 i386 GNU/Linux > > > The following 4 packages are going to be installed: > > - chromium-browser-78.0.3904.108-1.mga7.i586 > - chromium-browser-stable-78.0.3904.108-1.mga7.i586 > - glibc-2.29-19.mga7.i586 > - libjsoncpp19-1.8.4-2.mga7.i586 > > ---- > > I rebooted because of glibc install. > > --- > > Browsed some websites, including this one, played a video, seems to be > working. replying has become a bad habit lately This was on 32-bit Plasma (KDE) Adding a 64-bit OK because of Comments 2 and 3. Validating. Advisory in Comment 1. Keywords:
(none) =>
validated_update
Thomas Backlund
2019-11-30 12:35:03 CET
Keywords:
(none) =>
advisory An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2019-0347.html Status:
NEW =>
RESOLVED |