epel-package-announce
August 2019
epel-package-announce@lists.fedoraproject.org
- 1 participants
- 372 discussions
[SECURITY] Fedora EPEL 7 Update: chromium-75.0.3770.100-3.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-931a6c5c69
2019-08-01 02:20:45.673860
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora EPEL 7
Version : 75.0.3770.100
Release : 3.el7
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Fix itinerant crashes. ---- Update to Chromium 75.0.3770.100. The usual pile
of bugs and CVE fixes. vaapi support disabled, just too broken. :( Fixes
CVE-2019-5824 CVE-2019-5825 CVE-2019-5826 CVE-2019-5827 CVE-2019-5828
CVE-2019-5829 CVE-2019-5830 CVE-2019-5831 CVE-2019-5832 CVE-2019-5833
CVE-2019-5834 CVE-2019-5835 CVE-2019-5836 CVE-2019-5837 CVE-2019-5838
CVE-2019-5839 CVE-2019-5840 CVE-2019-5842
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718269 - CVE-2019-5840 chromium-browser: Popup blocker bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1718269
[ 2 ] Bug #1718268 - CVE-2019-5839 chromium-browser: Incorrect handling of certain code points in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1718268
[ 3 ] Bug #1718267 - CVE-2019-5838 chromium-browser: Overly permissive tab access in Extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1718267
[ 4 ] Bug #1718266 - CVE-2019-5837 chromium-browser: Cross-origin resources size disclosure in Appcache
https://bugzilla.redhat.com/show_bug.cgi?id=1718266
[ 5 ] Bug #1718264 - CVE-2019-5836 chromium-browser: Heap buffer overflow in Angle
https://bugzilla.redhat.com/show_bug.cgi?id=1718264
[ 6 ] Bug #1718263 - CVE-2019-5835 chromium-browser: Out of bounds read in Swiftshader
https://bugzilla.redhat.com/show_bug.cgi?id=1718263
[ 7 ] Bug #1718262 - CVE-2019-5834 chromium-browser: URL spoof in Omnibox on iOS
https://bugzilla.redhat.com/show_bug.cgi?id=1718262
[ 8 ] Bug #1718261 - CVE-2019-5833 chromium-browser: Inconsistent security UI placement
https://bugzilla.redhat.com/show_bug.cgi?id=1718261
[ 9 ] Bug #1718260 - CVE-2019-5832 chromium-browser: Incorrect CORS handling in XHR
https://bugzilla.redhat.com/show_bug.cgi?id=1718260
[ 10 ] Bug #1718259 - CVE-2019-5831 chromium-browser: Incorrect map processing in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1718259
[ 11 ] Bug #1718258 - CVE-2019-5830 chromium-browser: Incorrectly credentialed requests in CORS
https://bugzilla.redhat.com/show_bug.cgi?id=1718258
[ 12 ] Bug #1718257 - CVE-2019-5829 chromium-browser: Use after free in Download Manager
https://bugzilla.redhat.com/show_bug.cgi?id=1718257
[ 13 ] Bug #1718256 - CVE-2019-5828 chromium-browser: Use after free in ServiceWorker
https://bugzilla.redhat.com/show_bug.cgi?id=1718256
[ 14 ] Bug #1707248 - CVE-2019-5826 chromium-browser: Use-after-free in IndexedDB
https://bugzilla.redhat.com/show_bug.cgi?id=1707248
[ 15 ] Bug #1707247 - CVE-2019-5825 chromium-browser: Out-of-bounds write in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1707247
[ 16 ] Bug #1702913 - CVE-2019-5823 chromium-browser: Forced navigation from service worker
https://bugzilla.redhat.com/show_bug.cgi?id=1702913
[ 17 ] Bug #1702912 - CVE-2019-5822 chromium-browser: CORS bypass in download manager
https://bugzilla.redhat.com/show_bug.cgi?id=1702912
[ 18 ] Bug #1702911 - CVE-2019-5821 chromium-browser: Integer overflow in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1702911
[ 19 ] Bug #1702910 - CVE-2019-5820 chromium-browser: Integer overflow in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1702910
[ 20 ] Bug #1702909 - CVE-2019-5819 chromium-browser: Incorrect escaping in developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1702909
[ 21 ] Bug #1702908 - CVE-2019-5818 chromium-browser: Uninitialized value in media reader
https://bugzilla.redhat.com/show_bug.cgi?id=1702908
[ 22 ] Bug #1702907 - CVE-2019-5817 chromium-browser: Heap buffer overflow in Angle on Windows
https://bugzilla.redhat.com/show_bug.cgi?id=1702907
[ 23 ] Bug #1702906 - CVE-2019-5816 chromium-browser: Exploit persistence extension on Android
https://bugzilla.redhat.com/show_bug.cgi?id=1702906
[ 24 ] Bug #1702905 - CVE-2019-5815 chromium-browser: Heap buffer overflow in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1702905
[ 25 ] Bug #1702904 - CVE-2019-5814 chromium-browser: CORS bypass in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1702904
[ 26 ] Bug #1702903 - CVE-2019-5813 chromium-browser: Out of bounds read in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1702903
[ 27 ] Bug #1702902 - CVE-2019-5812 chromium-browser: URL spoof in Omnibox on iOS
https://bugzilla.redhat.com/show_bug.cgi?id=1702902
[ 28 ] Bug #1702901 - CVE-2019-5811 chromium-browser: CORS bypass in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1702901
[ 29 ] Bug #1702900 - CVE-2019-5810 chromium-browser: User information disclosure in Autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1702900
[ 30 ] Bug #1702899 - CVE-2019-5809 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1702899
[ 31 ] Bug #1702898 - CVE-2019-5808 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1702898
[ 32 ] Bug #1702897 - CVE-2019-5807 chromium-browser: Memory corruption in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1702897
[ 33 ] Bug #1702896 - CVE-2019-5806 chromium-browser: Integer overflow in Angle
https://bugzilla.redhat.com/show_bug.cgi?id=1702896
[ 34 ] Bug #1702895 - CVE-2019-5805 chromium-browser: Use after free in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1702895
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 8 months
- 1
- 0
Fedora EPEL 7 Update: SDL2_image-2.0.5-1.el7
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-9e89c9323f
2019-08-01 02:20:45.673739
--------------------------------------------------------------------------------
Name : SDL2_image
Product : Fedora EPEL 7
Version : 2.0.5
Release : 1.el7
URL : http://www.libsdl.org/projects/SDL_image/
Summary : Image loading library for SDL
Description :
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device. This package contains a simple library for loading images of
various formats (BMP, PPM, PCX, GIF, JPEG, PNG) as SDL surfaces.
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1726375 - SDL2_image-2.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1726375
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update SDL2_image' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 8 months
- 1
- 0