| Summary: | <www-client/chromium-87.0.4280.66 <www-client/google-chrome-87.0.4280.66: Multiple vulnerabilities (CVE-2020-{16018,16019,16020,16021,16022,16015,16014,16023,16024,16025,16026,16027,16028,16029,16030,16031,16032,16033,16034,16012,16036}) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Stephan Hartmann (RETIRED) <sultan> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | major | CC: | chromium |
| Priority: | Normal | Flags: | nattka:
sanity-check-
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html | ||
| See Also: | https://bugs.gentoo.org/show_bug.cgi?id=773040 | ||
| Whiteboard: | A2 [glsa+ cve] | ||
| Package list: |
www-client/chromium-87.0.4280.66 amd64 arm64
dev-libs/re2-0.2020.11.01
|
Runtime testing required: | --- |
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a2d36e1cb2596a11cf03cb92b44a52d1e07f2c0a commit a2d36e1cb2596a11cf03cb92b44a52d1e07f2c0a Author: Stephan Hartmann <sultan@gentoo.org> AuthorDate: 2020-11-18 10:58:11 +0000 Commit: Stephan Hartmann <sultan@gentoo.org> CommitDate: 2020-11-18 11:01:50 +0000 www-client/chromium: stable channel bump to 87.0.4280.66 Bug: https://bugs.gentoo.org/755227 Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Stephan Hartmann <sultan@gentoo.org> www-client/chromium/Manifest | 2 +- .../{chromium-87.0.4280.63.ebuild => chromium-87.0.4280.66.ebuild} | 0 2 files changed, 1 insertion(+), 1 deletion(-) x86 stable amd64 stable arm done arm64 done all arches done Please cleanup, thanks! The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=102e93f384ad8fcf9fbcc729641de6a4a09cb73a commit 102e93f384ad8fcf9fbcc729641de6a4a09cb73a Author: Stephan Hartmann <sultan@gentoo.org> AuthorDate: 2020-11-22 08:17:59 +0000 Commit: Stephan Hartmann <sultan@gentoo.org> CommitDate: 2020-11-22 08:17:59 +0000 www-client/chromium: security cleanup Bug: https://bugs.gentoo.org/755227 Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Stephan Hartmann <sultan@gentoo.org> www-client/chromium/Manifest | 2 - www-client/chromium/chromium-86.0.4240.198.ebuild | 893 --------------------- .../chromium/files/chromium-87-xproto-crash.patch | 38 - www-client/chromium/files/chromium-launcher-r5.sh | 56 -- www-client/chromium/metadata.xml | 3 - 5 files changed, 992 deletions(-) Unable to check for sanity:
> no match for package: www-client/chromium-87.0.4280.66
This issue was resolved and addressed in GLSA 202012-05 at https://security.gentoo.org/glsa/202012-05 by GLSA coordinator Thomas Deutschmann (whissi). |
See ${URL}. www-client/google-chrome bumped already. Checking chromium atm. Not added CVE-2020-16035 (cros) and CVE-2019-8075 (flash), because those look unrelated. Can't add CVE-2020-16012 to alias (already taken by firefox in bug #755170).