Bug 687732 (CVE-2019-5828, CVE-2019-5829, CVE-2019-5830, CVE-2019-5831, CVE-2019-5832, CVE-2019-5833, CVE-2019-5834, CVE-2019-5835, CVE-2019-5836, CVE-2019-5837, CVE-2019-5838, CVE-2019-5839, CVE-2019-5840)

Summary:

<www-client/chromium-75.0.3770.80 - multiple vulnerabilities

Product:

Gentoo Security

Reporter:

wbrana

Component:

Vulnerabilities

Assignee:

Gentoo Security <security>

Status:

RESOLVED FIXED

Severity:

normal

CC:

chromium

Priority:

Normal

Version:

unspecified

Hardware:

All

OS:

Linux

See Also:

https://github.com/gentoo/gentoo/pull/12242

Whiteboard:

A2 [glsa+ cve]

Package list:

Runtime testing required:

---

Bug Depends on:

688072

Bug Blocks:

Attachments:

Description	Flags
ebuild (no gcc patches)	none
some patch	none
another patch	none

Description wbrana 2019-06-09 17:35:24 UTC

https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html

Comment 1 Alex 2019-06-15 14:21:46 UTC

Created attachment 579866 [details]
ebuild (no gcc patches)

Builds for me with clang-8.

Comment 2 Alex 2019-06-15 14:22:36 UTC

Created attachment 579868 [details, diff]
some patch

Comment 3 Alex 2019-06-15 14:23:03 UTC

Created attachment 579870 [details, diff]
another patch

Comment 4 Larry the Git Cow gentoo-dev

2019-06-15 17:48:33 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6f888010c38c5e9cc25f66ada7681d443782c2c6

commit 6f888010c38c5e9cc25f66ada7681d443782c2c6
Author:     Stephan Hartmann <stha09@googlemail.com>
AuthorDate: 2019-06-11 20:39:03 +0000
Commit:     Mike Gilbert <floppym@gentoo.org>
CommitDate: 2019-06-15 17:48:06 +0000

    www-client/chromium: version bump
    
    Closes: https://bugs.gentoo.org/687732
    Closes: https://github.com/gentoo/gentoo/pull/12242
    Package-Manager: Portage-2.3.66, Repoman-2.3.11
    Signed-off-by: Stephan Hartmann <stha09@googlemail.com>
    Signed-off-by: Mike Gilbert <floppym@gentoo.org>

 www-client/chromium/Manifest                       |   1 +
 www-client/chromium/chromium-75.0.3770.80.ebuild   | 718 +++++++++++++++++++++
 .../chromium/files/chromium-75-fix-gn-gen.patch    |  27 +
 .../chromium/files/chromium-75-gcc-angle-fix.patch |  20 +
 www-client/chromium/files/chromium-75-llvm8.patch  |  17 +
 www-client/chromium/files/chromium-75-lss.patch    |  63 ++
 .../chromium/files/chromium-75-noexcept.patch      | 101 +++
 .../chromium/files/chromium-75-pure-virtual.patch  |  50 ++
 .../chromium/files/chromium-75-unique_ptr.patch    |  31 +
 .../chromium/files/chromium-compiler-r9.patch      | 196 ++++++
 10 files changed, 1224 insertions(+)

Comment 5 GLSAMaker/CVETool Bot gentoo-dev

2019-08-15 16:03:22 UTC

This issue was resolved and addressed in
 GLSA 201908-18 at https://security.gentoo.org/glsa/201908-18
by GLSA coordinator Aaron Bauman (b-man).