Bug 33032

Summary: Updated chromium 123.0.6312.86 packages fix vulnerabilities
Product: Mageia Reporter: christian barranco <chb0>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: normal    
Priority: Normal CC: andrewsfarm, brtians1, fri, lyh19901223, mageia, sysadmin-bugs
Version: 9   
Target Milestone: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Source RPM: chromium-browser-stable-120.0.6099.224-1.mga9.tainted.src.rpm CVE:
Status comment:
Bug Depends on: 33056    
Bug Blocks:    

Description christian barranco 2024-03-29 11:34:56 CET
It has been a while Chromium has not been updated due to old LLVM version in MGA9.
llvm17-suite package will allow to build it again.
However, due to old GCC12 and the need of GCC libs for clang, i586 version cannot be built anymore.

THIS UPDATE WILL THEN BE ONLY FOR X86_64

https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html
Comment 1 christian barranco 2024-04-01 15:18:47 CEST
Ready for QA!

ADVISORY NOTICE PROPOSAL
========================

New chromium-browser-stable 123.0.6312.86 security update


Description
The chromium-browser-stable package has been updated to the 123.0.6312.86 release.
Since the last update 120.0.6099.224, 66 vulnerabilities are fixed, at least.
More information are available following the links listed as references.

Please, do note, only x86_64 is supported from now on.
i586 support for linux was stopped some years ago and the community is not able to provide patches anymore for the latest Chromium code.


References
https://bugs.mageia.org/show_bug.cgi?id=33032
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_12.html
https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_27.html
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_22.html
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_13.html
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html



SRPMS
9/tainted
chromium-browser-stable-123.0.6312.86-1.mga9.tainted.src.rpm


PROVIDED PACKAGES
=================
x86_64
chromium-browser-123.0.6312.86-1.mga9.tainted.x86_64.rpm
chromium-browser-stable-123.0.6312.86-1.mga9.tainted.x86_64.rpm

Assignee: chb0 => qa-bugs

christian barranco 2024-04-01 16:59:20 CEST

CC: (none) => fri, j.alberto.vc, lyh19901223

Comment 2 katnatek 2024-04-01 20:00:16 CEST
RH mageia 9
Updated without issues
Youtube OK
Facebook OK

This comment from

rpm -qa chromium-browser-stable
chromium-browser-stable-123.0.6312.86-1.mga9.tainted
katnatek 2024-04-01 20:14:01 CEST

Keywords: (none) => advisory

Comment 3 Morgan Leijström 2024-04-01 21:38:07 CEST
OK here mga9-64

$ chromium-browser --version
Chromium 123.0.6312.86 Mageia.Org 9

Swedish localisation
Remembered settings and opened tabs
Various shops, banking, video sites
Saving files, showing pdf, printing
Comment 4 Thomas Andrews 2024-04-02 15:56:40 CEST
MGA9-64 Plasma, HP Pavilion. This is a new install of Chromium on this system.

No installation issues. Bookmarks, etc imported from Firefox OK. All sites I checked worked OK. I use Chromium for my banking, but I did not test that as I am not at home at the moment. All else seems good.

Changing the hardware for this to x86_64, because of Comment 0.

CC: (none) => andrewsfarm
Hardware: All => x86_64

PC LX 2024-04-02 19:50:34 CEST

CC: (none) => mageia

Comment 5 Thomas Andrews 2024-04-03 20:40:58 CEST
MGA9-64 Plasma, i5-7500, Nvidia Quadro K620 graphics. No installation issues.

This is the system I use for my banking, and it's OK with this update.
Comment 6 christian barranco 2024-04-03 22:42:47 CEST
Hi. Would it be possible to validate it now?
There is a new release just coming but I prefer we push this one anyway, because we are lagging many versions behind.
Comment 7 katnatek 2024-04-03 23:12:09 CEST
(In reply to christian barranco from comment #6)
> Hi. Would it be possible to validate it now?
> There is a new release just coming but I prefer we push this one anyway,
> because we are lagging many versions behind.

We count we you if some issue is reported

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update
Whiteboard: (none) => MGA9-64-OK

katnatek 2024-04-03 23:13:06 CEST

CC: j.alberto.vc => (none)

katnatek 2024-04-04 20:22:46 CEST

Keywords: advisory, validated_update => (none)
Depends on: (none) => 33056
Whiteboard: MGA9-64-OK => (none)

katnatek 2024-04-04 21:01:14 CEST

Keywords: (none) => advisory

katnatek 2024-04-04 21:01:36 CEST

Keywords: advisory => (none)

Comment 8 katnatek 2024-04-04 21:02:04 CEST
Sorry wrong tab :P
Comment 9 Brian Rockwell 2024-04-05 17:21:38 CEST
is this a duplicate for 33056

CC: (none) => brtians1

Comment 10 katnatek 2024-04-05 19:20:29 CEST
(In reply to Brian Rockwell from comment #9)
> is this a duplicate for 33056

Not really , this come first the short history is in https://bugs.mageia.org/show_bug.cgi?id=33056#c5
Comment 11 katnatek 2024-04-05 23:58:43 CEST
Fixed by bug#33056

Status: NEW => RESOLVED
Resolution: (none) => FIXED