FEDORA-EPEL-2021-7b1c8f21d9 — security update for chromium

stable

chromium-89.0.4389.82-1.el7

FEDORA-EPEL-2021-7b1c8f21d9 created by spot 3 years ago for Fedora EPEL 7

Hi there. This is the latest release of the browser that Google doesn't want you to use.

It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189

Fix issue with swiftshader where symbols were not properly generated for the dlopened shared objects, preventing proper functionality.

Update to 88.0.4324.182.

Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted chromium-88.0.4324.182-2.el7, and has inherited its bugs and notes.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-89.0.4389.82-1.el7

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1929523 CVE-2021-21149 chromium-browser: Stack overflow in Data Transfer

BZ#1929524 CVE-2021-21150 chromium-browser: Use after free in Downloads

BZ#1929525 CVE-2021-21151 chromium-browser: Use after free in Payments

BZ#1929526 CVE-2021-21152 chromium-browser: Heap buffer overflow in Media

BZ#1929527 CVE-2021-21153 chromium-browser: Stack overflow in GPU Process

BZ#1929528 CVE-2021-21154 chromium-browser: Heap buffer overflow in Tab Strip

BZ#1929529 CVE-2021-21155 chromium-browser: Heap buffer overflow in Tab Strip

BZ#1929530 CVE-2021-21156 chromium-browser: Heap buffer overflow in V8

BZ#1929531 CVE-2021-21157 chromium-browser: Use after free in Web Sockets

BZ#1929535 CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157 chromium: various flaws [epel-all]

BZ#1932692 WebGL doesn't work in software mode (SwiftShader is broken)

BZ#1935934 CVE-2021-21162 chromium-browser: Use after free in WebRTC

BZ#1935935 CVE-2021-21180 chromium-browser: Use after free in tab search

BZ#1935936 CVE-2021-21164 chromium-browser: Insufficient data validation in Chrome for iOS

BZ#1935937 CVE-2021-21170 chromium-browser: Incorrect security UI in Loader

BZ#1935938 CVE-2021-21181 chromium-browser: Side-channel information leakage in autofill

BZ#1935939 CVE-2021-21166 chromium-browser: Object lifecycle issue in audio

BZ#1935940 CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio

BZ#1935941 CVE-2021-21179 chromium-browser: Use after free in Network Internals

BZ#1935942 CVE-2021-21187 chromium-browser: Insufficient data validation in URL formatting

BZ#1935943 CVE-2021-21173 chromium-browser: Side-channel information leakage in Network Internals

BZ#1935944 CVE-2021-21174 chromium-browser: Inappropriate implementation in Referrer

BZ#1935945 CVE-2021-21183 chromium-browser: Inappropriate implementation in performance APIs

BZ#1935946 CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip

BZ#1935947 CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip and Navigation

BZ#1935948 CVE-2021-21178 chromium-browser: Inappropriate implementation in Compositing

BZ#1935950 CVE-2021-21169 chromium-browser: Out of bounds memory access in V8

BZ#1935951 CVE-2021-21163 chromium-browser: Insufficient data validation in Reader Mode

BZ#1935952 CVE-2021-21175 chromium-browser: Inappropriate implementation in Site isolation

BZ#1935953 CVE-2021-21177 chromium-browser: Insufficient policy enforcement in Autofill

BZ#1935954 CVE-2021-21185 chromium-browser: Insufficient policy enforcement in extensions

BZ#1935955 CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium

BZ#1935956 CVE-2021-21184 chromium-browser: Inappropriate implementation in performance APIs

BZ#1935958 CVE-2021-21168 chromium-browser: Insufficient policy enforcement in appcache

BZ#1935959 CVE-2021-21167 chromium-browser: Use after free in bookmarks

BZ#1935960 CVE-2021-21188 chromium-browser: Use after free in Blink

BZ#1935961 CVE-2021-21172 chromium-browser: Insufficient policy enforcement in File System API

BZ#1935962 CVE-2021-21182 chromium-browser: Insufficient policy enforcement in navigations

BZ#1935963 CVE-2021-21176 chromium-browser: Inappropriate implementation in full screen mode

BZ#1935964 CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip

BZ#1935965 CVE-2021-21186 chromium-browser: Insufficient policy enforcement in QR scanning

BZ#1935966 CVE-2021-21165 chromium-browser: Object lifecycle issue in audio

BZ#1935967 CVE-2021-21189 chromium-browser: Insufficient policy enforcement in payments

BZ#1935972 CVE-2021-21159 CVE-2021-21160 CVE-2021-21161 CVE-2021-21162 CVE-2021-21163 CVE-2021-21164 CVE-2021-21165 CVE-2021-21166 CVE-2021-21167 CVE-2021-21168 CVE-2021-21169 CVE-2021-21170 CVE-2021-21171 CVE-2021-21172 ... chromium: various flaws [epel-all]

chromium-89.0.4389.82-1.el7

Automated Test Results

ignored