| Summary: | <www-client/{chromium,google-chrome}-81.0.4044.92: Multiple vulnerabilities (CVE-2020-{6423,6430,6431,6432,6433,6434,6435,6436,6437,6438,6439,6440}) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Stephan Hartmann (RETIRED) <sultan> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | major | CC: | chromium |
| Priority: | Normal | Keywords: | PullRequest |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html | ||
| See Also: | https://github.com/gentoo/gentoo/pull/15274 | ||
| Whiteboard: | A2 [glsa+ cve] | ||
| Package list: |
www-client/chromium-81.0.4044.92
|
Runtime testing required: | --- |
@maintainer(s), please advise if ready for stabilisation, or call yourself. amd64 stable. Maintainer(s), please cleanup. Security, please add it to the existing request, or file a new one. Resetting sanity check; keywords are not fully specified and arches are not CC-ed. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4da704c93b1a3b46a159986d86084b857e5e36ba commit 4da704c93b1a3b46a159986d86084b857e5e36ba Author: Stephan Hartmann <stha09@googlemail.com> AuthorDate: 2020-04-09 13:30:25 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2020-04-09 17:20:08 +0000 www-client/chromium: security cleanup Bug: https://bugs.gentoo.org/716612 Package-Manager: Portage-2.3.89, Repoman-2.3.20 Signed-off-by: Stephan Hartmann <stha09@googlemail.com> Signed-off-by: Mike Gilbert <floppym@gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/15274 www-client/chromium/Manifest | 2 - www-client/chromium/chromium-80.0.3987.162.ebuild | 747 --------------------- www-client/chromium/chromium-80.0.3987.163.ebuild | 747 --------------------- .../chromium/files/chromium-77-system-icu.patch | 20 - .../chromium/files/chromium-80-gcc-abstract.patch | 41 -- .../files/chromium-80-gcc-incomplete-type.patch | 229 ------- .../files/chromium-80-gcc-permissive.patch | 33 - .../chromium/files/chromium-80-include.patch | 33 - .../files/chromium-80-unbundle-libxml.patch | 101 --- .../chromium/files/chromium-compiler-r10.patch | 185 ----- .../chromium/files/chromium-unbundle-zlib-r1.patch | 13 - 11 files changed, 2151 deletions(-) Tree clean, thanks! New GLSA request filed. This issue was resolved and addressed in GLSA 202004-09 at https://security.gentoo.org/glsa/202004-09 by GLSA coordinator Thomas Deutschmann (whissi). |
See ${URL} {chromium,google-chrome}-81.0.4044.92 is already in the tree. Only want to add a patch to chromium to fix building with gcc-10. Reproducible: Always