[SECURITY] Fedora 27 Update: chromium-69.0.3497.100-1.fc27

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-3e010c6501
2018-11-11 02:39:32.166773
--------------------------------------------------------------------------------

Name        : chromium
Product     : Fedora 27
Version     : 69.0.3497.100
Release     : 1.fc27
URL         : http://www.chromium.org/Home
Summary     : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct  4 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 69.0.3497.100-1
- update to 69.0.3497.100
* Wed Sep 12 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 69.0.3497.92-1
- update to 69.0.3497.92
* Wed Sep  5 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 69.0.3497.81-1
- update to 69.0.3497.81
* Tue Aug 28 2018 Patrik Novotn�� <panovotn(a)redhat.com&gt; - 68.0.3440.106-4
- change requires to minizip-compat(-devel), rhbz#1609830, rhbz#1615381
* Sun Aug 19 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 68.0.3440.106-3
- fix library filters
* Fri Aug 17 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 68.0.3440.106-2
- fix error with defaulting on redeclaration
* Thu Aug  9 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 68.0.3440.106-1
- update to 68.0.3440.106
* Wed Aug  8 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 68.0.3440.84-1
- update to 68.0.3440.84
* Mon Jul 30 2018 Tom Callaway <spot(a)fedoraproject.org&gt; - 68.0.3440.75-1
- update to 68.0.3440.75
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org&gt; -
67.0.3396.99-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul  9 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.99-1
- update to 67.0.3396.99
* Mon Jun 25 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.87-2
- add "Fedora" to the user agent string
* Tue Jun 19 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.87-1
- update to 67.0.3396.87
* Thu Jun  7 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.79-1
- update to 67.0.3396.79
* Wed Jun  6 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.62-2
- work around bug in RHEL7 python exec
* Wed May 30 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 67.0.3396.62-1
- 67 releases of chromium on the wall...
* Tue May 29 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.181-3
- also filter out fontconfig on epel7
* Wed May 23 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.181-2
- fix missing files
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.181-1
- update to 66.0.3359.181
* Tue May 15 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.170-2
- only x86_64 i686 have swiftshader
- fix gcc8 alignof issue on i686
* Mon May 14 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.170-1
- update to 66.0.3359.170
- include swiftshader files
* Tue May  1 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.139-1
- update to 66.0.3359.139
* Wed Apr 18 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 66.0.3359.117-1
- update to 66.0.3359.117
* Tue Apr 17 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.181-3
- use system fontconfig (except on epel7)
* Wed Apr  4 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.181-2
- add explicit dependency on minizip (bz 1534282)
* Wed Mar 28 2018 Tom Callaway <spot(a)fedoraproject.org&gt;
- check that there is no system 'google' module, shadowing bundled ones
- conditionalize api keys (on by default)
* Wed Mar 21 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.181-1
- update to 65.0.3325.181
* Mon Mar 19 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.162-3
- use bundled libdrm on epel7
* Fri Mar 16 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.162-2
- disable StartupNotify in chromium-browser.desktop (not in google-chrome desktop file)
  (bz1545241)
- use bundled freetype on epel7
* Wed Mar 14 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.162-1
- update to 65.0.3325.162
* Wed Mar  7 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 65.0.3325.146-1
- update to 65.0.3325.146
* Mon Mar  5 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 64.0.3282.186-1
- update to 64.0.3282.186
* Fri Feb 16 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 64.0.3282.167-1
- update to 64.0.3282.167
- include workaround for gcc8 bug in gn
- disable unnecessary aarch64 glibc symbol change
* Fri Feb  2 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 64.0.3282.140-1
- update to 64.0.3282.140
* Thu Feb  1 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 64.0.3282.119-2
- include user-session binary in chrome-remote-desktop subpackage
* Thu Jan 25 2018 Tom Callaway <spot(a)fedoraproject.org&gt; 64.0.3282.119-1
- update to 64.0.3282.119
* Fri Dec 15 2017 Tomas Popela <tpopela(a)redhat.com&gt; 63.0.3239.108-1
- Update to 63.0.3239.108
* Thu Dec  7 2017 Tom Callaway <spot(a)fedoraproject.org&gt; 63.0.3239.84-1
- update to 63.0.3239.84
* Wed Nov  8 2017 Tom Callaway <spot(a)fedoraproject.org&gt; 62.0.3202.89-1
- update to 62.0.3202.89
* Fri Oct 27 2017 Tom Callaway <spot(a)fedoraproject.org&gt; 62.0.3202.75-1
- update to 62.0.3202.75
- use devtoolset-7-toolchain to build on epel7
* Tue Oct 24 2017 Tom Callaway <spot(a)fedoraproject.org&gt; 62.0.3202.62-1.1
- do not attempt std=c++14 on epel7
* Wed Oct 18 2017 Tom Callaway <spot(a)fedoraproject.org&gt; 62.0.3202.62-1
- update to 62.0.3202.62
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1626164 - CVE-2018-16428 chromium: glib2: NULL pointer dereference in
g_markup_parse_context_end_parse() function in gmarkup.c [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1626164
  [ 2 ] Bug #1626173 - CVE-2018-16429 chromium: glib2: Out-of-bounds read in
g_markup_parse_context_parse() in gmarkup.c [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1626173
  [ 3 ] Bug #1633391 - CVE-2018-6119 chromium: chromium-browser: Spoof of contents of the
Omnibox (URL bar) via a crafted HTML page [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1633391
  [ 4 ] Bug #1633394 - CVE-2018-6055 chromium: chromium-browser: Insufficient policy
enforcement in Catalog Service [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1633394
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-3e010c6501' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------