[ol8_developer_EPEL] chromium-118.0.5993.70-1.el8.x86_64

Name:	chromium
Version:	118.0.5993.70
Release:	1.el8
Architecture:	x86_64
Group:	Unspecified
Size:	232614087
License:	BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
RPM:	chromium-118.0.5993.70-1.el8.x86_64.rpm
Source RPM:	chromium-118.0.5993.70-1.el8.src.rpm
Build Date:	Sat Oct 21 2023
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.chromium.org/Home
Summary:	A WebKit (Blink) powered web browser that Google doesn't want you to use
Description:	Chromium is an open-source web browser, powered by WebKit (Blink).

Changelog (Show File list) (Show related packages)

Wed Oct 11 2023 Than Ngo <than@redhat.com> - 118.0.5993.70-1

- update to 118.0.5993.70
    - CVE-2023-5218: Use after free in Site Isolation.
    - CVE-2023-5487: Inappropriate implementation in Fullscreen.
    - CVE-2023-5484: Inappropriate implementation in Navigation.
    - CVE-2023-5475: Inappropriate implementation in DevTools.
    - CVE-2023-5483: Inappropriate implementation in Intents.
    - CVE-2023-5481: Inappropriate implementation in Downloads.
    - CVE-2023-5476: Use after free in Blink History.
    - CVE-2023-5474: Heap buffer overflow in PDF.
    - CVE-2023-5479: Inappropriate implementation in Extensions API.
    - CVE-2023-5485: Inappropriate implementation in Autofill.
    - CVE-2023-5478: Inappropriate implementation in Autofill.
    - CVE-2023-5477: Inappropriate implementation in Installer.
    - CVE-2023-5486: Inappropriate implementation in Input.
    - CVE-2023-5473: Use after free in Cast.

Sat Oct 07 2023 Than Ngo <than@redhat.com> - 118.0.5993.54-1

- update to 118.0.5993.54
- drop use_gnome_keyring as it's removed by upstream

Thu Oct 05 2023 Than Ngo <than@redhat.com> - 117.0.5938.149-1

- update to 117.0.5938.149
- fix CVE-2023-5346: Type Confusion in V8

Fri Sep 29 2023 Than Ngo <than@redhat.com> - 117.0.5938.132-2
```
- add workaround for the crash on BTI capable system
```

Thu Sep 28 2023 Than Ngo <than@redhat.com> - 117.0.5938.132-1

- update to 117.0.5938.132
- CVE-2023-5217, heap buffer overflow in vp8 encoding in libvpx.
- CVE-2023-5186, use after free in Passwords.
- CVE-2023-5187, use after free in Extensions.

Sat Sep 23 2023 Than Ngo <than@redhat.com> - 117.0.5938.92-2
```
- backport upstream patch to fix memory leak
```
Fri Sep 22 2023 Than Ngo <than@redhat.com> - 117.0.5938.92-1
```
- update to 117.0.5938.92
```
Sun Sep 17 2023 Than Ngo <than@redhat.com> - 117.0.5938.88-1
```
- update to 117.0.5938.88
```
Wed Sep 13 2023 Than Ngo <than@redhat.com> - 117.0.5938.62-1
```
- update to 117.0.5938.62
```
Tue Sep 12 2023 Than Ngo <than@redhat.com> - 116.0.5845.187-1
```
- update to 116.0.5845.187
```