Bug 29744

Summary:	chromium-browser-stable new security issues fixed in 96.0.4664.93
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	critical
Priority:	Normal	CC:	brtians1, davidwhodgins, fri, hdetavernier, herman.viaene, joselp, nicolas.salguero, sysadmin-bugs
Version:	8	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA8-64-OK
Source RPM:	chromium-browser-stable	CVE:
Status comment:

Description Nicolas Salguero 2021-12-08 15:19:59 CET

Upstream has released version 96.0.4664.93 on December 6:
https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html

It fixes several new security issues.

This is the current version in the stable channel:
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

Nicolas Salguero 2021-12-08 15:20:32 CET

Whiteboard: (none) => MGA8TOO
Source RPM: (none) => chromium-browser-stable

Comment 1 Lewis Smith 2021-12-08 20:12:19 CET

Assigning this to you Nicolas, as you have already done the necessary Cauldron commit.

Assignee: bugsquad => nicolas.salguero

Comment 2 Nicolas Salguero 2021-12-09 16:20:18 CET

Suggested advisory:
========================

Updated chromium-browser-stable packages fix security vulnerabilities.

The chromium-browser-stable package has been updated to 96.0.4664.93
version that fixes multiples security vulnerabilities.

References:
https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html
========================

Updated packages in core/updates_testing:
========================
chromium-browser-96.0.4664.93-1.mga8
chromium-browser-stable-96.0.4664.93-1.mga8

from SRPM:
chromium-browser-stable-96.0.4664.93-1.mga8.src.rpm

Assignee: nicolas.salguero => qa-bugs
CC: (none) => nicolas.salguero
Status: NEW => ASSIGNED
Whiteboard: MGA8TOO => (none)
Version: Cauldron => 8

Comment 3 Jose Manuel López 2021-12-10 09:57:29 CET

Hi,

Installed on Mageia Virtualbox Plasma kde x86_64, works fine for the moment, I'm writing now from this version.

Addons ok, youtube ok, prime video ok, themes and settings ok, language ok.

Greetings!!

CC: (none) => joselpddj

Comment 4 Hugues Detavernier 2021-12-10 10:18:14 CET

Hi,

upgraded from previous Version 96.0.4664.45 without any problem.

Youtube, bank and others sites are ok.

French parameters, themes and settings are ok too.

CC: (none) => hdetavernier

Comment 5 Morgan Leijström 2021-12-10 10:49:20 CET

OK for me: mga8-64, plasma, nvidia-current, swedish
Tested video site, performed banking, and some other sites.

CC: (none) => fri

Comment 6 Herman Viaene 2021-12-10 15:45:05 CET

MGA8-64 Plasma on Lenovo B50 in Dutch
No installation issues.
No obvius problems wuth youtube, newspaper, bank.

CC: (none) => herman.viaene

Comment 7 Brian Rockwell 2021-12-10 16:30:59 CET

MGA8-64 GNOME on laptop

Install worked

- jitsi meet working
- youtube videos working correctly
- working as designed

CC: (none) => brtians1

Comment 8 David Walser 2021-12-10 17:06:04 CET

Working fine here too.  Advisory in Comment 2.

CC: (none) => sysadmin-bugs
Whiteboard: (none) => MGA8-64-OK
Keywords: (none) => validated_update

Dave Hodgins 2021-12-10 21:22:58 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

Comment 9 Mageia Robot 2021-12-10 23:20:36 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0555.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED