Bug 28077

Summary:	chromium-browser-stable new security issues fixed in 87.0.4280.141
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	critical
Priority:	Normal	CC:	davidwhodgins, mageia, mageia, nicolas.salguero, ouaurelien, sysadmin-bugs
Version:	7	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7-64-OK
Source RPM:	chromium-browser-stable-87.0.4280.88-1.mga7.src.rpm	CVE:
Status comment:

Description Nicolas Salguero 2021-01-13 10:11:46 CET

Upstream has released version 87.0.4280.141 on January 6:
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html

This is the current version in the stable channel:
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

It fixes several new security issues.

Nicolas Salguero 2021-01-13 10:12:49 CET

Source RPM: (none) => chromium-browser-stable-87.0.4280.88-1.mga7.src.rpm
CC: (none) => nicolas.salguero
Severity: normal => critical
Assignee: bugsquad => nicolas.salguero

Nicolas Salguero 2021-01-13 10:14:53 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Nicolas Lécureuil 2021-01-14 12:44:03 CET

new version available on cauldron and mga7:

src:
     chromium-browser-stable-87.0.4280.141-1.mga7

Whiteboard: MGA7TOO => (none)
Assignee: nicolas.salguero => qa-bugs
CC: (none) => mageia
Version: Cauldron => 7

Comment 2 Nicolas Salguero 2021-01-14 14:10:50 CET

Suggested advisory:
========================

The updated packages fix security vulnerabilities.

References:
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
========================

Updated packages in core/updates_testing:
========================
chromium-browser-stable-87.0.4280.141-1.mga7
chromium-browser-87.0.4280.141-1.mga7

from SRPM:
chromium-browser-stable-87.0.4280.141-1.mga7.src.rpm

Status: NEW => ASSIGNED

Comment 3 Aurelien Oudelet 2021-01-14 15:13:18 CET

MGA7 Plasma.
Runs fine.
SSL OK
widevine-protected site OK
Main current webapplication are OK

Leaving for test with those have webcan to test communications through it.

CC: (none) => ouaurelien

Comment 4 PC LX 2021-01-14 17:32:00 CET

Installed and tested without issues.

Tested on a bunch of sites (including audio, video, webgl) without issues.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia-current proprietary driver.


$ uname -a
Linux marte 5.10.6-desktop-1.mga7 #1 SMP Sat Jan 9 20:09:55 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -q google-chrome-stable 
google-chrome-stable-87.0.4280.141-1

CC: (none) => mageia

Comment 5 Dave Hodgins 2021-01-14 19:13:36 CET

No regressions found. Validating the update.

Keywords: (none) => validated_update
CC: (none) => davidwhodgins, sysadmin-bugs
Whiteboard: (none) => MGA7-64-OK

Comment 6 Aurelien Oudelet 2021-01-17 15:31:42 CET

Advisory pushed to SVN.

Keywords: (none) => advisory

Comment 7 Mageia Robot 2021-01-17 17:08:47 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0044.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED