FEDORA-EPEL-2022-b169dce5bc — security update for chromium

stable

chromium-99.0.4844.51-1.el7

FEDORA-EPEL-2022-b169dce5bc created by spot 2 years ago for Fedora EPEL 7

Update to 99.0.4844.51. Oh, hey, look, the EPEL7 build is back. I'm going to try to keep it alive, but you still really should move to EL8 at a minimum. If you're on EL8, it fixes these security issues. If you're on EL7, it fixes these security issues and so so many more.

CVE-2021-37981 CVE-2021-37982 CVE-2021-37983 CVE-2021-37984 CVE-2021-37985 CVE-2021-37986 CVE-2021-37987 CVE-2021-37988 CVE-2021-37989 CVE-2021-37990 CVE-2021-37991 CVE-2021-37992 CVE-2021-37993 CVE-2021-37996 CVE-2021-37994 CVE-2021-37995 CVE-2021-22570 CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798 CVE-2022-0799 CVE-2022-0800 CVE-2022-0801 CVE-2022-0802 CVE-2022-0803 CVE-2022-0804 CVE-2022-0805 CVE-2022-0806 CVE-2022-0807 CVE-2022-0808 CVE-2022-0809 CVE-2022-0096 CVE-2022-0097 CVE-2022-0098 CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103 CVE-2022-0104 CVE-2022-0105 CVE-2022-0106 CVE-2022-0107 CVE-2022-0108 CVE-2022-0109 CVE-2022-0110 CVE-2022-0111 CVE-2022-0112 CVE-2022-0113 CVE-2022-0114 CVE-2022-0115 CVE-2022-0116 CVE-2022-0117 CVE-2022-0118 CVE-2022-0120

This update has been submitted for testing by spot.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

misc provided feedback 2 years ago

karma

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

buc commented & provided feedback 2 years ago

It seems that sizes of rpm packages for epel7 is much larger than on Fedora branches.

Unstripped binaries? If so, why?

Fe., latest Firefox takes 275Mb on el7, whereas chromium + chromuim-comon take about 1.3Gb 8)

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-99.0.4844.51-1.el7

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#2015668 CVE-2021-37981 chromium-browser: Heap buffer overflow in Skia

BZ#2015669 CVE-2021-37982 chromium-browser: Use after free in Incognito

BZ#2015670 CVE-2021-37983 chromium-browser: Use after free in Dev Tools

BZ#2015671 CVE-2021-37984 chromium-browser: Heap buffer overflow in PDFium

BZ#2015672 CVE-2021-37985 chromium-browser: Use after free in V8

BZ#2015673 CVE-2021-37986 chromium-browser: Heap buffer overflow in Settings

BZ#2015674 CVE-2021-37987 chromium-browser: Use after free in Network APIs

BZ#2015676 CVE-2021-37988 chromium-browser: Use after free in Profiles

BZ#2015677 CVE-2021-37989 chromium-browser: Inappropriate implementation in Blink

BZ#2015678 CVE-2021-37990 chromium-browser: Inappropriate implementation in WebView

BZ#2015679 CVE-2021-37991 chromium-browser: Race in V8

BZ#2015680 CVE-2021-37992 chromium-browser: Out of bounds read in WebAudio

BZ#2015681 CVE-2021-37993 chromium-browser: Use after free in PDF Accessibility

BZ#2015682 CVE-2021-37996 chromium-browser: Insufficient validation of untrusted input in Downloads

BZ#2015683 CVE-2021-37994 chromium-browser: Inappropriate implementation in iFrame Sandbox

BZ#2015684 CVE-2021-37995 chromium-browser: Inappropriate implementation in WebApp Installer

BZ#2015686 CVE-2021-37981 CVE-2021-37982 CVE-2021-37983 CVE-2021-37984 CVE-2021-37985 CVE-2021-37986 CVE-2021-37987 CVE-2021-37988 CVE-2021-37989 CVE-2021-37990 CVE-2021-37991 CVE-2021-37992 CVE-2021-37993 CVE-2021-37994 ... chromium: various flaws [epel-all]

BZ#2037457 CVE-2022-0096 chromium-browser: Use after free in Storage

BZ#2037458 CVE-2022-0097 chromium-browser: Inappropriate implementation in DevTools

BZ#2037459 CVE-2022-0098 chromium-browser: Use after free in Screen Capture

BZ#2037460 CVE-2022-0099 chromium-browser: Use after free in Sign-in

BZ#2037461 CVE-2022-0100 chromium-browser: Heap buffer overflow in Media streams API

BZ#2037462 CVE-2022-0101 chromium-browser: Heap buffer overflow in Bookmarks

BZ#2037463 CVE-2022-0102 chromium-browser: Type Confusion in V8

BZ#2037464 CVE-2022-0103 chromium-browser: Use after free in SwiftShader

BZ#2037465 CVE-2022-0104 chromium-browser: Heap buffer overflow in ANGLE

BZ#2037466 CVE-2022-0105 chromium-browser: Use after free in PDF

BZ#2037467 CVE-2022-0106 chromium-browser: Use after free in Autofill

BZ#2037468 CVE-2022-0107 chromium-browser: Use after free in File Manager API

BZ#2037469 CVE-2022-0108 chromium-browser: Inappropriate implementation in Navigation

BZ#2037470 CVE-2022-0109 chromium-browser: Inappropriate implementation in Autofill

BZ#2037471 CVE-2022-0110 chromium-browser: Incorrect security UI in Autofill

BZ#2037472 CVE-2022-0111 chromium-browser: Inappropriate implementation in Navigation

BZ#2037473 CVE-2022-0112 chromium-browser: Incorrect security UI in Browser UI

BZ#2037474 CVE-2022-0113 chromium-browser: Inappropriate implementation in Blink

BZ#2037475 CVE-2022-0114 chromium-browser: Out of bounds memory access in Web Serial

BZ#2037476 CVE-2022-0115 chromium-browser: Uninitialized Use in File API

BZ#2037477 CVE-2022-0116 chromium-browser: Inappropriate implementation in Compositing

BZ#2037478 CVE-2022-0117 chromium-browser: Policy bypass in Service Workers

BZ#2037479 CVE-2022-0118 chromium-browser: Inappropriate implementation in WebShare

BZ#2037480 CVE-2022-0120 chromium-browser: Inappropriate implementation in Passwords

BZ#2037482 CVE-2022-0096 CVE-2022-0097 CVE-2022-0098 CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103 CVE-2022-0104 CVE-2022-0105 CVE-2022-0106 CVE-2022-0107 CVE-2022-0108 CVE-2022-0109 CVE-2022-0110 ... chromium: various flaws [epel-all]

BZ#2049429 CVE-2021-22570 protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference

BZ#2055642 CVE-2021-22570 chromium: protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference [epel-all]

BZ#2059898 CVE-2022-0789 chromium-browser: Heap buffer overflow in ANGLE

BZ#2059899 CVE-2022-0790 chromium-browser: Use after free in Cast UI

BZ#2059900 CVE-2022-0791 chromium-browser: Use after free in Omnibox

BZ#2059901 CVE-2022-0792 chromium-browser: Out of bounds read in ANGLE

BZ#2059902 CVE-2022-0793 chromium-browser: Use after free in Views

BZ#2059903 CVE-2022-0794 chromium-browser: Use after free in WebShare

BZ#2059904 CVE-2022-0795 chromium-browser: Type Confusion in Blink Layout

BZ#2059905 CVE-2022-0796 chromium-browser: Use after free in Media

BZ#2059906 CVE-2022-0797 chromium-browser: Out of bounds memory access in Mojo

BZ#2059907 CVE-2022-0798 chromium-browser: Use after free in MediaStream

BZ#2059908 CVE-2022-0799 chromium-browser: Insufficient policy enforcement in Installer

BZ#2059909 CVE-2022-0800 chromium-browser: Heap buffer overflow in Cast UI

BZ#2059910 CVE-2022-0801 chromium-browser: Inappropriate implementation in HTML parser

BZ#2059911 CVE-2022-0802 chromium-browser: Inappropriate implementation in Full screen mode

BZ#2059912 CVE-2022-0803 chromium-browser: Inappropriate implementation in Permissions

BZ#2059913 CVE-2022-0804 chromium-browser: Inappropriate implementation in Full screen mode

BZ#2059914 CVE-2022-0805 chromium-browser: Use after free in Browser Switcher

BZ#2059915 CVE-2022-0806 chromium-browser: Data leak in Canvas

BZ#2059916 CVE-2022-0807 chromium-browser: Inappropriate implementation in Autofill

BZ#2059917 CVE-2022-0808 chromium-browser: Use after free in Chrome OS Shell

BZ#2059918 CVE-2022-0809 chromium-browser: Out of bounds memory access in WebXR

BZ#2059920 CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798 CVE-2022-0799 CVE-2022-0800 CVE-2022-0801 CVE-2022-0802 CVE-2022-0803 ... chromium: various flaws [epel-all]

chromium-99.0.4844.51-1.el7

Automated Test Results

ignored