FEDORA-2021-4740239e28 — security update for chromium

stable

chromium-89.0.4389.90-3.fc33

FEDORA-2021-4740239e28 created by spot 3 years ago for Fedora 33

Fix issue where chromium would crash upon accessing components/cast_*. Thanks to Gentoo for the patch.

Hi there. This is the latest release of the browser that Google doesn't want you to use.

It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-4740239e28

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted chromium-89.0.4389.82-1.fc33, and has inherited its bugs and notes.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

szydell commented & provided feedback 3 years ago

karma

works

roguetechca provided feedback 3 years ago

karma

This update can be pushed to stable now if the maintainer wishes

3 years ago

stefanb commented & provided feedback 3 years ago

karma

works for me

This update has been submitted for stable by bodhi.

3 years ago

kparal commented & provided feedback 3 years ago

karma

Chromium finally doesn't crash. Thanks.

This update has been pushed to stable.

3 years ago

boycottsystemd1 provided feedback 3 years ago

karma

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-89.0.4389.90-3.fc33

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1935934 CVE-2021-21162 chromium-browser: Use after free in WebRTC

BZ#1935935 CVE-2021-21180 chromium-browser: Use after free in tab search

BZ#1935936 CVE-2021-21164 chromium-browser: Insufficient data validation in Chrome for iOS

BZ#1935937 CVE-2021-21170 chromium-browser: Incorrect security UI in Loader

BZ#1935938 CVE-2021-21181 chromium-browser: Side-channel information leakage in autofill

BZ#1935939 CVE-2021-21166 chromium-browser: Object lifecycle issue in audio

BZ#1935940 CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio

BZ#1935941 CVE-2021-21179 chromium-browser: Use after free in Network Internals

BZ#1935942 CVE-2021-21187 chromium-browser: Insufficient data validation in URL formatting

BZ#1935943 CVE-2021-21173 chromium-browser: Side-channel information leakage in Network Internals

BZ#1935944 CVE-2021-21174 chromium-browser: Inappropriate implementation in Referrer

BZ#1935945 CVE-2021-21183 chromium-browser: Inappropriate implementation in performance APIs

BZ#1935946 CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip

BZ#1935947 CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip and Navigation

BZ#1935948 CVE-2021-21178 chromium-browser: Inappropriate implementation in Compositing

BZ#1935950 CVE-2021-21169 chromium-browser: Out of bounds memory access in V8

BZ#1935951 CVE-2021-21163 chromium-browser: Insufficient data validation in Reader Mode

BZ#1935952 CVE-2021-21175 chromium-browser: Inappropriate implementation in Site isolation

BZ#1935953 CVE-2021-21177 chromium-browser: Insufficient policy enforcement in Autofill

BZ#1935954 CVE-2021-21185 chromium-browser: Insufficient policy enforcement in extensions

BZ#1935955 CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium

BZ#1935956 CVE-2021-21184 chromium-browser: Inappropriate implementation in performance APIs

BZ#1935958 CVE-2021-21168 chromium-browser: Insufficient policy enforcement in appcache

BZ#1935959 CVE-2021-21167 chromium-browser: Use after free in bookmarks

BZ#1935960 CVE-2021-21188 chromium-browser: Use after free in Blink

BZ#1935961 CVE-2021-21172 chromium-browser: Insufficient policy enforcement in File System API

BZ#1935962 CVE-2021-21182 chromium-browser: Insufficient policy enforcement in navigations

BZ#1935963 CVE-2021-21176 chromium-browser: Inappropriate implementation in full screen mode

BZ#1935964 CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip

BZ#1935965 CVE-2021-21186 chromium-browser: Insufficient policy enforcement in QR scanning

BZ#1935966 CVE-2021-21165 chromium-browser: Object lifecycle issue in audio

BZ#1935967 CVE-2021-21189 chromium-browser: Insufficient policy enforcement in payments

BZ#1935971 CVE-2021-21159 CVE-2021-21160 CVE-2021-21161 CVE-2021-21162 CVE-2021-21163 CVE-2021-21164 CVE-2021-21165 CVE-2021-21166 CVE-2021-21167 CVE-2021-21168 CVE-2021-21169 CVE-2021-21170 CVE-2021-21171 CVE-2021-21172 ... chromium: various flaws [fedora-all]

BZ#1938962 Received signal 11 SEGV_MAPERR 000000000058

chromium-89.0.4389.90-3.fc33

Automated Test Results

ignored