Bug 31534 - Chromium updated to 110.0.5481.177 to fix vulnerabilities
Summary: Chromium updated to 110.0.5481.177 to fix vulnerabilities
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
: 31612 (view as bug list)
Depends on:
Blocks:
 
Reported: 2023-02-10 09:01 CET by Morgan Leijström
Modified: 2023-03-01 22:15 CET (History)
4 users (show)

See Also:
Source RPM: chromium-browser-stable-109.0.5414.119-1.mga8
CVE:
Status comment:


Attachments

Description Morgan Leijström 2023-02-10 09:01:06 CET
( Branched from
Bug 31465 - Chromium updated to 109.0.5414.119 to fix vulnerabilities )

110.0.5481.77 has been released on February 7, fixing several security issues:
https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
Morgan Leijström 2023-02-10 09:03:17 CET

Assignee: bugsquad => chb0

Comment 1 christian barranco 2023-02-10 21:55:17 CET
Hi. ETA: 25th of Feb.
Comment 2 Morgan Leijström 2023-02-21 17:37:52 CET
segfaults during launch on mga8-64, Plasma, nvidia-current, i7, backport kernel

chromium-browser --version
Chromium 110.0.5481.100 Mageia.Org 8

Launching in Konsole, lots of output, ending in

 [0221/172818.476030:ERROR:elf_dynamic_array_reader.h(64)] tag not found

If you can not repeat, ask me to grab output.
Comment 3 sturmvogel 2023-02-23 06:59:46 CET
Segfaults for me to on MGA8 64 bit Plasma
chromium-browser-stable-110.0.5481.100-1.mga8 (updates testing)
Comment 4 sturmvogel 2023-02-23 07:03:18 CET
May we get some movement into updating Chromium? We are shipping heavily outdated versions with countless security issuses.


Chromium updated Chromium to 110.0.5481.177 to fix vulnerabilities. 
110.0.5481.177 has been released on Feb 22, fixing several security issues:
https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html
Comment 5 christian barranco 2023-02-23 23:04:48 CET
Hi
For the time being, Chromium 109 is a better option.
110 has something broken and there is a release a least every week. No way to cope with this pace.
I will be able to work on it this weekend.
Comment 6 christian barranco 2023-02-26 22:55:15 CET
Builds are on-going

Summary: Chromium updated to 110.0.5481.77 to fix vulnerabilities => Chromium updated to 110.0.5481.177 to fix vulnerabilities

Comment 7 christian barranco 2023-02-27 08:00:51 CET
Hi. My local build of chromium 110...177 works fine; MGA8 testing. 
Could you please provide me with websites which were leading to crashes?
Comment 8 Morgan Leijström 2023-02-27 10:22:34 CET
Sure. Verified now on vesion .100 from testing again
Examples crashing when opening

1) Gmail

2) Nextcloud 25.0.3 share with password https://tribun.cloud/index.php/s/KTOdling crashes during page load, while a user login crash after entering both fields.
Comment 9 Morgan Leijström 2023-02-27 10:24:36 CET
I guess that it in comment 2 was reopening tabs from previous session but crashed before it painted on screen.

This time i closed all tabs while running previous version, before I upgraded to .100 again.
Comment 10 christian barranco 2023-02-27 11:05:20 CET
(In reply to Morgan Leijström from comment #8)
> Sure. Verified now on vesion .100 from testing again
> Examples crashing when opening
> 
> 1) Gmail
> 
> 2) Nextcloud 25.0.3 share with password
> https://tribun.cloud/index.php/s/KTOdling crashes during page load, while a
> user login crash after entering both fields.


Thanks Morgan. No crash with this for me, using 110...177
Comment 11 christian barranco 2023-02-28 07:56:55 CET
Ready for QA!

Assignee: chb0 => qa-bugs

Comment 12 Morgan Leijström 2023-02-28 12:25:45 CET
mga8-64 OK

$ chromium-browser --version
Chromium 110.0.5481.177 Mageia.Org 8

Used three different login methods for banking, used video sites, Gmail.

(currently https://tribun.cloud from comment 8 is unavailable due to yet another let down of the hosting site owncube :( )
Comment 13 sturmvogel 2023-02-28 15:05:26 CET
*** Bug 31612 has been marked as a duplicate of this bug. ***

CC: (none) => ftg

Comment 14 Herman Viaene 2023-03-01 11:31:49 CET
MGA8-64 MATE on Acer Aspire 5253
No installation issues.
$ chromium-browser --version
Chromium 110.0.5481.177 Mageia.Org 8
$ chromium-browser

(chromium-browser:21210): Gtk-WARNING **: 10:46:39.379: Theme parsing error: gtk.css:2:33: Failed to import: Error opening file /home/tester8/.config/gtk-3.0/window_decorations.css: No such file or directory
[21246:21246:0301/104649.627632:ERROR:gbm_wrapper.cc(255)] Failed to export buffer to dma_buf: No such file or directory (2)
And this error is repeated a lot, but it doesn't stop chromium from behaving OK.

CC: (none) => herman.viaene

Comment 15 Morgan Leijström 2023-03-01 13:52:18 CET
according to dev ml it also works on mga9 and freeze push have been executed.

Whiteboard: (none) => MGA8-64-OK
CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

Dave Hodgins 2023-03-01 17:28:01 CET

Keywords: (none) => advisory
CC: (none) => davidwhodgins

Comment 16 Mageia Robot 2023-03-01 22:15:59 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2023-0076.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.