FEDORA-2021-116eff380f — security update for chromium

stable

chromium-94.0.4606.81-1.fc34

FEDORA-2021-116eff380f created by spot 3 years ago for Fedora 34

Update to 94.0.4606.81. Built with is_official_build=true, which disables all sorts of debugging check functions that upstream turned on in 94. These debugging checks were failing and causing the program to crash in ... fun ways.

It also fixes the usual pile of security issues, most notably: CVE-2021-37974 CVE-2021-37975 CVE-2021-37976 CVE-2021-37977 CVE-2021-37978 CVE-2021-37979 CVE-2021-37980

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-116eff380f

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

flo provided feedback 3 years ago

karma

BZ#2012441 general protection fault - error 0

ozeszty commented & provided feedback 3 years ago

karma

Fixed 94.0.4606.61-1.fc34 crash, thanks.

BZ#2010170 chromium browser crashes upon launch

This update can be pushed to stable now if the maintainer wishes

3 years ago

ozeszty commented & provided feedback 3 years ago

I was too fast with adding karma, after starting chromium it can't load the new tab page (set to open after start), page stays blank, there's a loading indicator spinning on tab's handle/title. I can open any bookmark or address, it loads, after that I also can successfully open a new tab page, unless original tab is not closed and still trying to load. Console is flooded with four messages.

$ chromium-browser 
ATTENTION: default value of option allow_rgb10_configs overridden by environment.
libva error: /usr/lib64/dri/iHD_drv_video.so init failed
failed to open /usr/lib64/dri/hybrid_drv_video.so
Not using hybrid_drv_video.so
ATTENTION: default value of option allow_rgb10_configs overridden by environment.
MESA-INTEL: warning: Ivy Bridge Vulkan support is incomplete
[4294:4294:1015/101910.167732:ERROR:sandbox_linux.cc(374)] InitializeSandbox() called with multiple threads in process gpu-process.
[4294:4294:1015/101910.171755:ERROR:shared_context_state.cc(357)] OOP raster support disabled: GrContext creation failed.
[4294:4294:1015/101910.171865:ERROR:gpu_channel_manager.cc(900)] ContextResult::kFatalFailure: Failed to InitializeGrContext for SharedContextState
[4294:4294:1015/101910.172138:ERROR:shared_image_stub.cc(524)] SharedImageStub: unable to create context
[4294:4294:1015/101910.172212:ERROR:gpu_channel.cc(568)] GpuChannel: Failed to create SharedImageStub
[4294:4294:1015/101910.173520:ERROR:shared_context_state.cc(357)] OOP raster support disabled: GrContext creation failed.
[4294:4294:1015/101910.173641:ERROR:gpu_channel_manager.cc(900)] ContextResult::kFatalFailure: Failed to InitializeGrContext for SharedContextState
[4294:4294:1015/101910.173828:ERROR:shared_image_stub.cc(524)] SharedImageStub: unable to create context
[4294:4294:1015/101910.173908:ERROR:gpu_channel.cc(568)] GpuChannel: Failed to create SharedImageStub

I tried to create a new profile and now it does not load at all, there's just an empty window and same messages in console. Same after downgrade to 93.0.4577.82-2.fc34.

I ended up with backing up and nuking ~/.config/chromium - now newest version works fine. I've had uBlock Origin installed and probably some flags changed.

tiberias_ provided feedback 3 years ago

karma

This update has been submitted for stable by bodhi.

3 years ago

boycottsystemd1 provided feedback 3 years ago

karma

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-94.0.4606.81-1.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#2010170 chromium browser crashes upon launch

BZ#2010573 CVE-2021-37974 chromium-browser: Use after free in Safe Browsing

BZ#2010574 CVE-2021-37975 chromium-browser: Use after free in V8

BZ#2010575 CVE-2021-37976 chromium-browser: Information leak in core

BZ#2010576 CVE-2021-37974 CVE-2021-37975 CVE-2021-37976 chromium: various flaws [fedora-all]

BZ#2012441 general protection fault - error 0

BZ#2012660 CVE-2021-37977 chromium-browser: Use after free in Garbage Collection

BZ#2012661 CVE-2021-37978 chromium-browser: Heap buffer overflow in Blink

BZ#2012662 CVE-2021-37979 chromium-browser: Heap buffer overflow in WebRTC

BZ#2012663 CVE-2021-37980 chromium-browser: Inappropriate implementation in Sandbox

BZ#2012664 CVE-2021-37977 CVE-2021-37978 CVE-2021-37979 CVE-2021-37980 chromium: various flaws [fedora-all]

chromium-94.0.4606.81-1.fc34

Automated Test Results

ignored