Bug 28369

Summary: chromium-browser-stable new security issues fixed in 88.0.4324.182
Product: Mageia Reporter: Nicolas Salguero <nicolas.salguero>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: critical    
Priority: Normal CC: andrewsfarm, mageia, nicolas.salguero, ouaurelien, sysadmin-bugs
Version: 8Keywords: advisory, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA7TOO MGA7-64-OK MGA8-64-OK
Source RPM: chromium-browser-stable-88.0.4324.150-1.mga8.src.rpm CVE:
Status comment:

Description Nicolas Salguero 2021-02-17 11:35:36 CET 
Upstream has released version 88.0.4324.182 on February 16:
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html

This is the current version in the stable channel:
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

It fixes several new security issues.
Nicolas Salguero 2021-02-17 11:35:56 CET

Source RPM: (none) => chromium-browser-stable-88.0.4324.150-1.mga8.src.rpm
Whiteboard: (none) => MGA7TOO

David Walser 2021-02-17 21:08:56 CET

Whiteboard: MGA7TOO => MGA8TOO, MGA7TOO

Comment 1 Lewis Smith 2021-02-18 08:50:26 CET 
Assigning to Christiaan as the active maintainer for this.
CC'ing NicolasS who did recent updates.

CC: (none) => nicolas.salguero
Assignee: bugsquad => cjw

Comment 2 Nicolas Salguero 2021-03-03 09:23:07 CET 
Suggested advisory:
========================

The updated packages fix security vulnerabilities.

References:
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html
========================

Updated packages in core/updates_testing:
========================
chromium-browser-stable-88.0.4324.182-1.mga7
chromium-browser-88.0.4324.182-1.mga7
chromium-browser-stable-88.0.4324.182-1.mga8
chromium-browser-88.0.4324.182-1.mga8

from SRPMS:
chromium-browser-stable-88.0.4324.182-1.mga7.src.rpm
chromium-browser-stable-88.0.4324.182-1.mga8.src.rpm

Version: Cauldron => 8
Assignee: cjw => qa-bugs
Status: NEW => ASSIGNED
Whiteboard: MGA8TOO, MGA7TOO => MGA7TOO

Comment 3 PC LX 2021-03-03 17:07:45 CET 
Installed and tested without issues.

Tested on a bunch of sites. Tested webcam, microphone, video, audio, webgl, etc. Tested benchmarks/performance. No issues noticed.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia-current proprietary driver.


$ uname -a
Linux marte 5.10.19-desktop-1.mga7 #1 SMP Fri Feb 26 23:48:09 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ cat /proc/driver/nvidia/version 
NVRM version: NVIDIA UNIX x86_64 Kernel Module  460.56  Tue Feb 23 23:31:36 UTC 2021
GCC version:  gcc version 8.4.0 (Mageia 8.4.0-1.mga7) 
$ rpm -q chromium-browser-stable 
chromium-browser-stable-88.0.4324.182-1.mga7

CC: (none) => mageia
Whiteboard: MGA7TOO => MGA7TOO MGA7-64-OK

Comment 4 Thomas Andrews 2021-03-03 23:27:03 CET 
System: i5 2500, i915 graphics, wired Internet connection, 64-bit Plasma MGA8.

No installation issues. Tested on a bunch of sites, mostly weather or climate related. Some had video, some were interactive in some fashion. No issues noted. Looks OK here.

Validating. Advisory in Comment 2.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs
Whiteboard: MGA7TOO MGA7-64-OK => MGA7TOO MGA7-64-OK MGA8-64-OK

Comment 5 Aurelien Oudelet 2021-03-04 14:23:51 CET 
Advisory pushed to SVN.

CC: (none) => ouaurelien
Keywords: (none) => advisory

Comment 6 Mageia Robot 2021-03-04 17:55:14 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0106.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED