[Bug 1966572] Re: Chromium Zero Day

2022-03-31 Thread Seth Arnold
B[], aha, you've received no Chromium updates since November 2021
because the author of that PPA hasn't provided any.

apt-file will report what files are in the Ubuntu package whether or not
you have it installed. It's very handy to see what files are in an
Ubuntu package without installing it.

dpkg -l will report what files are in the package that you've got
installed. It's the better tool if you have installed third-party
packages.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread B[]
@seth-arnold I'm not sure snap does think it has the package?

```
$ apt-file show chromium-browser
chromium-browser: /usr/bin/chromium-browser
chromium-browser: /usr/share/applications/chromium-browser.desktop
chromium-browser: /usr/share/apport/package-hooks/chromium-browser.py
chromium-browser: /usr/share/doc/chromium-browser/changelog.Debian.gz
chromium-browser: /usr/share/doc/chromium-browser/copyright
chromium-browser: /usr/share/icons/hicolor/128x128/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/22x22/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/24x24/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/256x256/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/48x48/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/64x64/apps/chromium-browser.png
chromium-browser: /usr/share/lintian/overrides/chromium-browser
chromium-browser: /usr/share/pixmaps/chromium-browser.png
```

```
$ sudo snap refresh
All snaps up to date.
```

```
$ sudo snap list
Name   Version  RevTracking Publisher   Notes
bare   1.0  5  latest/stablecanonical✓  base
core18 20220309 2344   latest/stablecanonical✓  base
gnome-3-34-18040+git.3556cb377 latest/stable/…  canonical✓  -
gtk-common-themes  0.1-59-g7bca6ae  1519   latest/stable/…  canonical✓  -
snapd  2.54.4   15177  latest/stablecanonical✓  snapd
```

As far as I can tell, snap doesn't think it has control over Chromium.
Unless apt somehow hides its control over Chromium (which would seem
weird).

Running `sudo apt-get update && sudo apt-get upgrade` I also get no
offer to upgrade Chromium.

I should also mention that I specifically run this version:
https://launchpad.net/%7Esaiarcot895/+archive/ubuntu/chromium-beta

** Bug watch added: github.com/saiarcot895/chromium-ubuntu-build/issues #123
   https://github.com/saiarcot895/chromium-ubuntu-build/issues/123

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread B[]
I re-read the front page and apparently the PPA is managed on GitHub,
I've opened a ticket [1] over there and pointed it back to this one.

[1] https://github.com/saiarcot895/chromium-ubuntu-build/issues/123

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread Seth Arnold
The 20.04 LTS chromium-browser deb package exists only to install the
chromium snap and deliver a few files to the filesystem outside the snap
packaging system:

$ apt-file show chromium-browser
chromium-browser: /usr/bin/chromium-browser
chromium-browser: /usr/share/applications/chromium-browser.desktop
chromium-browser: /usr/share/apport/package-hooks/chromium-browser.py
chromium-browser: /usr/share/doc/chromium-browser/changelog.Debian.gz
chromium-browser: /usr/share/doc/chromium-browser/copyright
chromium-browser: /usr/share/icons/hicolor/128x128/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/22x22/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/24x24/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/256x256/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/48x48/apps/chromium-browser.png
chromium-browser: /usr/share/icons/hicolor/64x64/apps/chromium-browser.png
chromium-browser: /usr/share/lintian/overrides/chromium-browser
chromium-browser: /usr/share/pixmaps/chromium-browser.png
$ 

The deb package doesn't need to be updated for snapd to automatically
install a chromium update when one is made available.

Check snap info chromium on your system to see if you've received the
update yet.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread B[]
@mdeslaur I see that the fix appears to be specifically for Ubuntu 18.04
LTS. The Chromium Browser package [1] appears to also support 20.04 LTS.
Should this be marked as 'Fix Released' before all affected versions
have a release?

[1] https://launchpad.net/ubuntu/+source/chromium-browser

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread Marc Deslauriers
This is published now:

https://ubuntu.com/security/notices/USN-5350-1

** Changed in: chromium-browser (Ubuntu)
   Status: New => Fix Released

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1966572

Title:
  Chromium Zero Day

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1966572/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs