Package chromium: Information

Source package: chromium
Version: 77.0.3865.120-alt1
Build time:  Oct 23, 2019, 02:15 PM in the task #239606
Category: Networking/WWW
Report package bug
License: BSD-3-Clause and LGPL-2.1+
Summary: An open source web browser developed by Google
Description: 
Chromium is an open-source browser project that aims to build a safer,
faster, and more stable way for all Internet users to experience the web.

List of rpms provided by this srpm:
chromium (x86_64, i586, aarch64)
chromium-debuginfo (x86_64, i586, aarch64)
chromium-gnome (x86_64, i586, aarch64)
chromium-kde (x86_64, i586, aarch64)

Maintainer: Alexey Gladkov


    1. libcups-devel
    2. perl-Switch
    3. /proc
    4. libstdc++-devel
    5. libstdc++-devel-static
    6. pkg-config
    7. pkgconfig(alsa)
    8. pkgconfig(atk)
    9. pkgconfig(atk-bridge-2.0)
    10. pkgconfig(atspi-2)
    11. pkgconfig(cairo) >= 1.6
    12. pkgconfig(dbus-1)
    13. pkgconfig(dbus-glib-1)
    14. pkgconfig(expat)
    15. bison
    16. pkgconfig(fontconfig)
    17. pkgconfig(freetype2)
    18. pkgconfig(gconf-2.0)
    19. pkgconfig(glib-2.0)
    20. pkgconfig(gnome-keyring-1)
    21. lld-devel
    22. pkgconfig(gtk+-2.0)
    23. pkgconfig(gtk+-3.0)
    24. pkgconfig(krb5-gssapi)
    25. llvm7.0-devel
    26. pkgconfig(libavcodec)
    27. pkgconfig(libavfilter)
    28. pkgconfig(libavformat)
    29. pkgconfig(libavresample)
    30. pkgconfig(libavutil)
    31. pkgconfig(libffi)
    32. pkgconfig(libpci)
    33. pkgconfig(libpulse)
    34. bzlib-devel
    35. pkgconfig(libva)
    36. pkgconfig(nspr)
    37. pkgconfig(nss)
    38. pkgconfig(opus)
    39. glibc-kernheaders
    40. chrpath
    41. pkgconfig(x11)
    42. clang7.0
    43. clang7.0-devel
    44. flex
    45. pkgconfig(xcomposite)
    46. pkgconfig(xcursor)
    47. pkgconfig(xdamage)
    48. pkgconfig(xext)
    49. pkgconfig(xfixes)
    50. pkgconfig(xi)
    51. pkgconfig(xkbcommon)
    52. pkgconfig(xrandr)
    53. pkgconfig(xrender)
    54. pkgconfig(xscrnsaver)
    55. pkgconfig(xt)
    56. pkgconfig(xtst)
    57. gperf
    58. ninja-build
    59. node
    60. gcc-c++
    61. usbids
    62. python
    63. xdg-utils
    64. python-modules-distutils
    65. python-modules-json

Last changed


Oct. 21, 2019 Alexey Gladkov 77.0.3865.120-alt1
- New version (77.0.3865.120).
- Security fixes:
  - CVE-2019-13693: Use-after-free in IndexedDB.
  - CVE-2019-13694: Use-after-free in WebRTC.
  - CVE-2019-13695: Use-after-free in audio.
  - CVE-2019-13696: Use-after-free in V8.
  - CVE-2019-13697: Cross-origin size leak.
Sept. 25, 2019 Alexey Gladkov 77.0.3865.90-alt1
- New version (77.0.3865.90).
- Security fixes:
  - CVE-2019-13685: Use-after-free in UI.
  - CVE-2019-13686: Use-after-free in offline pages.
  - CVE-2019-13687: Use-after-free in media.
  - CVE-2019-13688: Use-after-free in media.
Sept. 23, 2019 Alexey Gladkov 77.0.3865.75-alt1
- New version (77.0.3865.75).
- Security fixes:
  - CVE-2019-13659: URL spoof.
  - CVE-2019-13660: Full screen notification overlap.
  - CVE-2019-13661: Full screen notification spoof.
  - CVE-2019-13662: CSP bypass.
  - CVE-2019-13663: IDN spoof.
  - CVE-2019-13664: CSRF bypass.
  - CVE-2019-13665: Multiple file download protection bypass.
  - CVE-2019-13666: Side channel using storage size estimate.
  - CVE-2019-13667: URI bar spoof when using external app URIs.
  - CVE-2019-13668: Global window leak via console.
  - CVE-2019-13669: HTTP authentication spoof.
  - CVE-2019-13670: V8 memory corruption in regex.
  - CVE-2019-13671: Dialog box fails to show origin.
  - CVE-2019-13673: Cross-origin information leak using devtools.
  - CVE-2019-13674: IDN spoofing.
  - CVE-2019-13675: Extensions can be disabled by trailing slash.
  - CVE-2019-13676: Google URI shown for certificate warning.
  - CVE-2019-13677: Chrome web store origin needs to be isolated.
  - CVE-2019-13678: Download dialog spoofing.
  - CVE-2019-13679: User gesture needed for printing.
  - CVE-2019-13680: IP address spoofing to servers.
  - CVE-2019-13681: Bypass on download restrictions.
  - CVE-2019-13682: Site isolation bypass.
  - CVE-2019-13683: Exceptions leaked by devtools.
  - CVE-2019-5870: Use-after-free in media.
  - CVE-2019-5871: Heap overflow in Skia.
  - CVE-2019-5872: Use-after-free in Mojo.
  - CVE-2019-5873: URL bar spoofing on iOS.
  - CVE-2019-5874: External URIs may trigger other browsers.
  - CVE-2019-5875: URL bar spoof via download redirect.
  - CVE-2019-5876: Use-after-free in media.
  - CVE-2019-5877: Out-of-bounds access in V8.
  - CVE-2019-5878: Use-after-free in V8.
  - CVE-2019-5879: Extensions can read some local files.
  - CVE-2019-5880: SameSite cookie bypass.
  - CVE-2019-5881: Arbitrary read in SwiftShader.