You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa chromium

Sigurnosni nedostaci programskog paketa chromium

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2020-c4a555b0bb
2020-05-10 03:45:49.036463
——————————————————————————–

Name : chromium
Product : Fedora 32
Version : 81.0.4044.138
Release : 1.fc32
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

——————————————————————————–
Update Information:

Are you ready, kids? I said, are you ready? Whoooooo has another update for you
to see? Google Chromium! For browsing and tweeting (but not FTP) Google
Chromium! If improved security be something you wish Google Chromium! Then run
dnf while you flop like a fish! Google Chromium! Google Chromium! Google
Chromium! Google Chromium! Ahem. Sorry*. This update fixes the following
security vulnerabilities: * CVE-2020-6464 * CVE-2020-6461 * CVE-2020-6462
*Not sorry
——————————————————————————–
ChangeLog:

* Thu May 7 2020 Tom Callaway <spot@fedoraproject.org> – 81.0.4044.138-1
– update to 81.0.4044.138
* Tue May 5 2020 Tom Callaway <spot@fedoraproject.org> – 81.0.4044.129-1
– update to 81.0.4044.129
——————————————————————————–
References:

[ 1 ] Bug #1828859 – CVE-2020-6462 chromium-browser: Use after free in task scheduling
https://bugzilla.redhat.com/show_bug.cgi?id=1828859
[ 2 ] Bug #1828860 – CVE-2020-6461 chromium-browser: Use after free in storage
https://bugzilla.redhat.com/show_bug.cgi?id=1828860
[ 3 ] Bug #1832488 – CVE-2020-6464 chromium-browser: Type Confusion in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1832488
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-c4a555b0bb’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

AutorToni Vugdelija
Cert idNCERT-REF-2020-05-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa squid

Otkriveni su sigurnosni nedostaci u programskom paketu squid za operacijski sustav Debian. Otkriveni nedostaci potencijalnim udaljenim napadačima omogućuju izazivanje DoS...

Close