Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 31: FEDORA-2019-3e46b182ff Critical: Bluetooth Issues in Chromium

fedora
Calendar Grey November 29, 2019
Dist Fedora Esm H88
Important patches have been released for Fedora 31's Chromium to tackle two security concerns related to Bluetooth. Update today!
Fixes CVE-2019-13723 & CVE-2019-13724

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Fixes CVE-2019-13723 & CVE-2019-13724

* Mon Nov 25 2019 Tom Callaway - 78.0.3904.108-1

- update to 78.0.3904.108

* Sun Nov 17 2019 Tom Callaway - 78.0.3904.97-2

- allow clock_nanosleep through seccomp (bz #1773289)

* Thu Nov 7 2019 Tom Callaway - 78.0.3904.97-1

- update to 78.0.3904.97

* Fri Nov 1 2019 Tom Callaway - 78.0.3904.87-1

- update to 78.0.3904.87

- apply most of the freeworld changes in PR 23/24/25

* Wed Oct 23 2019 Tom Callaway - 78.0.3904.80-1

- update to 78.0.3904.80

* Wed Oct 16 2019 Tom Callaway - 77.0.3865.120-4

- upstream fix for zlib symbol exports with gcc

* Wed Oct 16 2019 Tom Callaway - 77.0.3865.120-3

- silence outdated build noise (bz1745745)

* Tue Oct 15 2019 Tom Callaway - 77.0.3865.120-2

- fix node handling for EPEL-8

* Mon Oct 14 2019 Tomas Popela - 77.0.3865.120-1

- Update to 77.0.3865.120

* Thu Oct 10 2019 Tom Callaway - 77.0.3865.90-4

- enable aarch64 for EPEL-8

* Wed Oct 9 2019 Tom Callaway - 77.0.3865.90-3

- spec cleanups and changes to make EPEL8 try to build

[ 1 ] Bug #1775342 - CVE-2019-13723 chromium: chromium-browser: use-after-free in bluetooth [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1775342

[ 2 ] Bug #1775353 - CVE-2019-13724 chromium: chromium-browser: out-of-bounds access in bluetooth [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1775353

su -c 'dnf upgrade --advisory FEDORA-2019-3e46b182ff' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 78.0.3904.108
Release: 1.fc31
Summary: A WebKit (Blink) powered web browser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here