Bug 28077 - chromium-browser-stable new security issues fixed in 87.0.4280.141
Summary: chromium-browser-stable new security issues fixed in 87.0.4280.141
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-01-13 10:11 CET by Nicolas Salguero
Modified: 2021-01-17 17:08 CET (History)
6 users (show)

See Also:
Source RPM: chromium-browser-stable-87.0.4280.88-1.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2021-01-13 10:11:46 CET 
Upstream has released version 87.0.4280.141 on January 6:
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html

This is the current version in the stable channel:
http://googlechromereleases.blogspot.com/search/label/Stable%20updates

It fixes several new security issues.
Nicolas Salguero 2021-01-13 10:12:49 CET

Source RPM: (none) => chromium-browser-stable-87.0.4280.88-1.mga7.src.rpm
CC: (none) => nicolas.salguero
Severity: normal => critical
Assignee: bugsquad => nicolas.salguero

Nicolas Salguero 2021-01-13 10:14:53 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Nicolas Lécureuil 2021-01-14 12:44:03 CET 
new version available on cauldron and mga7:

src:
     chromium-browser-stable-87.0.4280.141-1.mga7

Whiteboard: MGA7TOO => (none)
Assignee: nicolas.salguero => qa-bugs
CC: (none) => mageia
Version: Cauldron => 7

Comment 2 Nicolas Salguero 2021-01-14 14:10:50 CET 
Suggested advisory:
========================

The updated packages fix security vulnerabilities.

References:
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
========================

Updated packages in core/updates_testing:
========================
chromium-browser-stable-87.0.4280.141-1.mga7
chromium-browser-87.0.4280.141-1.mga7

from SRPM:
chromium-browser-stable-87.0.4280.141-1.mga7.src.rpm

Status: NEW => ASSIGNED

Comment 3 Aurelien Oudelet 2021-01-14 15:13:18 CET 
MGA7 Plasma.
Runs fine.
SSL OK
widevine-protected site OK
Main current webapplication are OK

Leaving for test with those have webcan to test communications through it.

CC: (none) => ouaurelien

Comment 4 PC LX 2021-01-14 17:32:00 CET 
Installed and tested without issues.

Tested on a bunch of sites (including audio, video, webgl) without issues.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia-current proprietary driver.


$ uname -a
Linux marte 5.10.6-desktop-1.mga7 #1 SMP Sat Jan 9 20:09:55 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -q google-chrome-stable 
google-chrome-stable-87.0.4280.141-1

CC: (none) => mageia

Comment 5 Dave Hodgins 2021-01-14 19:13:36 CET 
No regressions found. Validating the update.

Keywords: (none) => validated_update
CC: (none) => davidwhodgins, sysadmin-bugs
Whiteboard: (none) => MGA7-64-OK

Comment 6 Aurelien Oudelet 2021-01-17 15:31:42 CET 
Advisory pushed to SVN.

Keywords: (none) => advisory

Comment 7 Mageia Robot 2021-01-17 17:08:47 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0044.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.