FEDORA-2021-bc2770caed — security update for chromium

stable

chromium-94.0.4606.61-1.fc34

FEDORA-2021-bc2770caed created by spot 3 years ago for Fedora 34

Update to 94.0.4606.61. Fixes a big pile of security issues:

CVE-2021-30542 CVE-2021-30543 CVE-2021-30558 CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30629 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 CVE-2021-37972 CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963 CVE-2021-37964 CVE-2021-37965 CVE-2021-37966 CVE-2021-37967 CVE-2021-37968 CVE-2021-37969 CVE-2021-37970 CVE-2021-37971 CVE-2021-37973

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-bc2770caed

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

imabug provided feedback 3 years ago

karma

ibims commented & provided feedback 3 years ago

karma

LGTM. Thank you.

This update can be pushed to stable now if the maintainer wishes

3 years ago

boycottsystemd1 provided feedback 3 years ago

karma

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

chromium-94.0.4606.61-1.fc34

BZ#2001877 CVE-2021-30542 chromium-browser: Use after free in Tab Strip

BZ#2001879 CVE-2021-30543 chromium-browser: Use after free in Tab Strip

BZ#2001881 CVE-2021-30558 chromium-browser: Insufficient policy enforcement in content security policy

BZ#2001882 CVE-2021-30542 CVE-2021-30543 CVE-2021-30558 chromium: various flaws [fedora-all]

BZ#2004087 CVE-2021-30625 chromium-browser: Use after free in Selection API

BZ#2004088 CVE-2021-30626 chromium-browser: Out of bounds memory access in ANGLE

BZ#2004089 CVE-2021-30627 chromium-browser: Type Confusion in Blink layout

BZ#2004090 CVE-2021-30628 chromium-browser: Stack buffer overflow in ANGLE

BZ#2004091 CVE-2021-30629 chromium-browser: Use after free in Permissions

BZ#2004092 CVE-2021-30630 chromium-browser: Inappropriate implementation in Blink

BZ#2004093 CVE-2021-30631 chromium-browser: Type Confusion in Blink layout

BZ#2004095 CVE-2021-30632 chromium-browser: Out of bounds write in V8

BZ#2004096 CVE-2021-30633 chromium-browser: Use after free in Indexed DB API

BZ#2004231 CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30629 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 chromium: various flaws [fedora-all]

BZ#2006914 CVE-2021-37956 chromium-browser: Use after free in Offline use

BZ#2006915 CVE-2021-37957 chromium-browser: Use after free in WebGPU

BZ#2006916 CVE-2021-37958 chromium-browser: Inappropriate implementation in Navigation

BZ#2006917 CVE-2021-37959 chromium-browser: Use after free in Task Manager

BZ#2006918 CVE-2021-37960 chromium-browser: Inappropriate implementation in Blink graphics

BZ#2006919 CVE-2021-37961 chromium-browser: Use after free in Tab Strip

BZ#2006920 CVE-2021-37962 chromium-browser: Use after free in Performance Manager

BZ#2006921 CVE-2021-37963 chromium-browser: Side-channel information leakage in DevTools

BZ#2006922 CVE-2021-37964 chromium-browser: Inappropriate implementation in ChromeOS Networking

BZ#2006923 CVE-2021-37965 chromium-browser: Inappropriate implementation in Background Fetch API

BZ#2006924 CVE-2021-37966 chromium-browser: Inappropriate implementation in Compositing

BZ#2006925 CVE-2021-37967 chromium-browser: Inappropriate implementation in Background Fetch API

BZ#2006926 CVE-2021-37968 chromium-browser: Inappropriate implementation in Background Fetch API

BZ#2006927 CVE-2021-37969 chromium-browser: Inappropriate implementation in Google Updater

BZ#2006928 CVE-2021-37970 chromium-browser: Use after free in File System API

BZ#2006929 CVE-2021-37971 chromium-browser: Incorrect security UI in Web Browser UI

BZ#2006930 CVE-2021-37972 libjpeg-turbo: Out-of-bounds read in 64-bit SSE2 Huffman encoder

BZ#2006931 CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963 CVE-2021-37964 CVE-2021-37965 CVE-2021-37966 CVE-2021-37967 CVE-2021-37968 CVE-2021-37969 ... chromium: various flaws [fedora-all]

BZ#2007725 CVE-2021-37973 chromium-browser: Use after free in Portals

BZ#2007726 CVE-2021-37973 chromium: chromium-browser: Use after free in Portals [fedora-all]

chromium-94.0.4606.61-1.fc34

Automated Test Results

ignored