File _patchinfo of Package patchinfo
<patchinfo incident="10432"> <issue tracker="bnc" id="1133313">VUL-0: chromium: multiple security fixes in 74.0.3729.108</issue> <issue tracker="bnc" id="1137332">VUL-0: chromium: multiple security issues fixed in 75.0.3770.90</issue> <issue tracker="bnc" id="1134218">VUL-0: chromium: multiple security fixes in 74.0.3729.131</issue> <issue tracker="bnc" id="1129059">VUL-0: chromium: 73.0.3683.75 update</issue> <issue tracker="bnc" id="1138287">VUL-0: chromium: stable update 75.0.3770.90</issue> <issue tracker="cve" id="2019-5839"/> <issue tracker="cve" id="2019-5796"/> <issue tracker="cve" id="2019-5818"/> <issue tracker="cve" id="2019-5819"/> <issue tracker="cve" id="2019-5810"/> <issue tracker="cve" id="2019-5811"/> <issue tracker="cve" id="2019-5812"/> <issue tracker="cve" id="2019-5813"/> <issue tracker="cve" id="2019-5814"/> <issue tracker="cve" id="2019-5815"/> <issue tracker="cve" id="2019-5816"/> <issue tracker="cve" id="2019-5817"/> <issue tracker="cve" id="2019-5832"/> <issue tracker="cve" id="2019-5833"/> <issue tracker="cve" id="2019-5830"/> <issue tracker="cve" id="2019-5831"/> <issue tracker="cve" id="2019-5836"/> <issue tracker="cve" id="2019-5837"/> <issue tracker="cve" id="2019-5834"/> <issue tracker="cve" id="2019-5835"/> <issue tracker="cve" id="2019-5838"/> <issue tracker="cve" id="2019-5790"/> <issue tracker="cve" id="2019-5827"/> <issue tracker="cve" id="2019-5797"/> <issue tracker="cve" id="2019-5821"/> <issue tracker="cve" id="2019-5795"/> <issue tracker="cve" id="2019-5794"/> <issue tracker="cve" id="2019-5793"/> <issue tracker="cve" id="2019-5792"/> <issue tracker="cve" id="2019-5791"/> <issue tracker="cve" id="2019-5820"/> <issue tracker="cve" id="2019-5823"/> <issue tracker="cve" id="2019-5799"/> <issue tracker="cve" id="2019-5798"/> <issue tracker="cve" id="2019-5842"/> <issue tracker="cve" id="2019-5840"/> <issue tracker="cve" id="2019-5824"/> <issue tracker="cve" id="2019-5807"/> <issue tracker="cve" id="2019-5806"/> <issue tracker="cve" id="2019-5805"/> <issue tracker="cve" id="2019-5804"/> <issue tracker="cve" id="2019-5803"/> <issue tracker="cve" id="2019-5802"/> <issue tracker="cve" id="2019-5801"/> <issue tracker="cve" id="2019-5800"/> <issue tracker="cve" id="2019-5829"/> <issue tracker="cve" id="2019-5828"/> <issue tracker="cve" id="2019-5809"/> <issue tracker="cve" id="2019-5808"/> <issue tracker="cve" id="2019-5788"/> <issue tracker="cve" id="2019-5789"/> <issue tracker="cve" id="2019-5822"/> <issue tracker="cve" id="2019-5787"/> <category>security</category> <rating>important</rating> <packager>scarabeus_iv</packager> <description>This update for chromium fixes the following issues: Chromium was updated to 75.0.3770.90 (boo#1137332 boo#1138287): * CVE-2019-5842: Use-after-free in Blink. Also updated to 75.0.3770.80 boo#1137332: * CVE-2019-5828: Use after free in ServiceWorker * CVE-2019-5829: Use after free in Download Manager * CVE-2019-5830: Incorrectly credentialed requests in CORS * CVE-2019-5831: Incorrect map processing in V8 * CVE-2019-5832: Incorrect CORS handling in XHR * CVE-2019-5833: Inconsistent security UI placemen * CVE-2019-5835: Out of bounds read in Swiftshader * CVE-2019-5836: Heap buffer overflow in Angle * CVE-2019-5837: Cross-origin resources size disclosure in Appcache * CVE-2019-5838: Overly permissive tab access in Extensions * CVE-2019-5839: Incorrect handling of certain code points in Blink * CVE-2019-5840: Popup blocker bypass * Various fixes from internal audits, fuzzing and other initiatives * CVE-2019-5834: URL spoof in Omnibox on iOS Update to 74.0.3729.169: * Feature fixes update only Update to 74.0.3729.157: * Various security fixes from internal audits, fuzzing and other initiatives Includes security fixes from 74.0.3729.131 (boo#1134218): * CVE-2019-5827: Out-of-bounds access in SQLite * CVE-2019-5824: Parameter passing error in media player Update to 74.0.3729.108 boo#1133313: * CVE-2019-5805: Use after free in PDFium * CVE-2019-5806: Integer overflow in Angle * CVE-2019-5807: Memory corruption in V8 * CVE-2019-5808: Use after free in Blink * CVE-2019-5809: Use after free in Blink * CVE-2019-5810: User information disclosure in Autofill * CVE-2019-5811: CORS bypass in Blink * CVE-2019-5813: Out of bounds read in V8 * CVE-2019-5814: CORS bypass in Blink * CVE-2019-5815: Heap buffer overflow in Blink * CVE-2019-5818: Uninitialized value in media reader * CVE-2019-5819: Incorrect escaping in developer tools * CVE-2019-5820: Integer overflow in PDFium * CVE-2019-5821: Integer overflow in PDFium * CVE-2019-5822: CORS bypass in download manager * CVE-2019-5823: Forced navigation from service worker * CVE-2019-5812: URL spoof in Omnibox on iOS * CVE-2019-5816: Exploit persistence extension on Android * CVE-2019-5817: Heap buffer overflow in Angle on Windows Update to 73.0.3686.103: * Various feature fixes Update to 73.0.3683.86: * Just feature fixes around - Update conditions to use system harfbuzz on TW+ - Require java during build - Enable using pipewire when available - Rebase chromium-vaapi.patch to match up the Fedora one Update to 73.0.3683.75 boo#1129059: * CVE-2019-5787: Use after free in Canvas. * CVE-2019-5788: Use after free in FileAPI. * CVE-2019-5789: Use after free in WebMIDI. * CVE-2019-5790: Heap buffer overflow in V8. * CVE-2019-5791: Type confusion in V8. * CVE-2019-5792: Integer overflow in PDFium. * CVE-2019-5793: Excessive permissions for private API in Extensions. * CVE-2019-5794: Security UI spoofing. * CVE-2019-5795: Integer overflow in PDFium. * CVE-2019-5796: Race condition in Extensions. * CVE-2019-5797: Race condition in DOMStorage. * CVE-2019-5798: Out of bounds read in Skia. * CVE-2019-5799: CSP bypass with blob URL. * CVE-2019-5800: CSP bypass with blob URL. * CVE-2019-5801: Incorrect Omnibox display on iOS. * CVE-2019-5802: Security UI spoofing. * CVE-2019-5803: CSP bypass with Javascript URLs'. * CVE-2019-5804: Command line command injection on Windows. </description> <summary>Security update for chromium</summary> </patchinfo>
