[SECURITY] Fedora EPEL 8 Update: chromium-89.0.4389.82-1.el8

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-9ca5d37fa8
2021-03-27 00:29:19.114328
--------------------------------------------------------------------------------

Name        : chromium
Product     : Fedora EPEL 8
Version     : 89.0.4389.82
Release     : 1.el8
URL         : http://www.chromium.org/Home
Summary     : A WebKit (Blink) powered web browser
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

Hi there. This is the latest release of the browser that Google doesn't want you
to use.  It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180
CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160
CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183
CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163
CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184
CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182
CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189  ----
Fix issue with swiftshader where symbols were not properly generated for the
dlopened shared objects, preventing proper functionality.  ----  Update to
88.0.4324.182.   Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151
CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156
CVE-2021-21157
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar  8 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 89.0.4389.82-1
- update to 89.0.4389.82
* Thu Mar  4 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 89.0.4389.72-1
- update to 89.0.4389.72
* Tue Mar  2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl&gt; -
88.0.4324.182-3
- Rebuilt for updated systemd-rpm-macros
  See https://pagure.io/fesco/issue/2583.
* Thu Feb 25 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 88.0.4234.182-2
- fix swiftshader symbols in libEGL/libGLESv2 with gcc
* Wed Feb 17 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 88.0.4234.182-1
- update to 88.0.4234.182
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1929523 - CVE-2021-21149 chromium-browser: Stack overflow in Data Transfer
        https://bugzilla.redhat.com/show_bug.cgi?id=1929523
  [ 2 ] Bug #1929524 - CVE-2021-21150 chromium-browser: Use after free in Downloads
        https://bugzilla.redhat.com/show_bug.cgi?id=1929524
  [ 3 ] Bug #1929525 - CVE-2021-21151 chromium-browser: Use after free in Payments
        https://bugzilla.redhat.com/show_bug.cgi?id=1929525
  [ 4 ] Bug #1929526 - CVE-2021-21152 chromium-browser: Heap buffer overflow in Media
        https://bugzilla.redhat.com/show_bug.cgi?id=1929526
  [ 5 ] Bug #1929527 - CVE-2021-21153 chromium-browser: Stack overflow in GPU Process
        https://bugzilla.redhat.com/show_bug.cgi?id=1929527
  [ 6 ] Bug #1929528 - CVE-2021-21154 chromium-browser: Heap buffer overflow in Tab Strip
        https://bugzilla.redhat.com/show_bug.cgi?id=1929528
  [ 7 ] Bug #1929529 - CVE-2021-21155 chromium-browser: Heap buffer overflow in Tab Strip
        https://bugzilla.redhat.com/show_bug.cgi?id=1929529
  [ 8 ] Bug #1929530 - CVE-2021-21156 chromium-browser: Heap buffer overflow in V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1929530
  [ 9 ] Bug #1929531 - CVE-2021-21157 chromium-browser: Use after free in Web Sockets
        https://bugzilla.redhat.com/show_bug.cgi?id=1929531
  [ 10 ] Bug #1935934 - CVE-2021-21162 chromium-browser: Use after free in WebRTC
        https://bugzilla.redhat.com/show_bug.cgi?id=1935934
  [ 11 ] Bug #1935935 - CVE-2021-21180 chromium-browser: Use after free in tab search
        https://bugzilla.redhat.com/show_bug.cgi?id=1935935
  [ 12 ] Bug #1935936 - CVE-2021-21164 chromium-browser: Insufficient data validation in
Chrome for iOS
        https://bugzilla.redhat.com/show_bug.cgi?id=1935936
  [ 13 ] Bug #1935937 - CVE-2021-21170 chromium-browser: Incorrect security UI in Loader
        https://bugzilla.redhat.com/show_bug.cgi?id=1935937
  [ 14 ] Bug #1935938 - CVE-2021-21181 chromium-browser: Side-channel information leakage
in autofill
        https://bugzilla.redhat.com/show_bug.cgi?id=1935938
  [ 15 ] Bug #1935939 - CVE-2021-21166 chromium-browser: Object lifecycle issue in audio
        https://bugzilla.redhat.com/show_bug.cgi?id=1935939
  [ 16 ] Bug #1935940 - CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio
        https://bugzilla.redhat.com/show_bug.cgi?id=1935940
  [ 17 ] Bug #1935941 - CVE-2021-21179 chromium-browser: Use after free in Network
Internals
        https://bugzilla.redhat.com/show_bug.cgi?id=1935941
  [ 18 ] Bug #1935942 - CVE-2021-21187 chromium-browser: Insufficient data validation in
URL formatting
        https://bugzilla.redhat.com/show_bug.cgi?id=1935942
  [ 19 ] Bug #1935943 - CVE-2021-21173 chromium-browser: Side-channel information leakage
in Network Internals
        https://bugzilla.redhat.com/show_bug.cgi?id=1935943
  [ 20 ] Bug #1935944 - CVE-2021-21174 chromium-browser: Inappropriate implementation in
Referrer
        https://bugzilla.redhat.com/show_bug.cgi?id=1935944
  [ 21 ] Bug #1935945 - CVE-2021-21183 chromium-browser: Inappropriate implementation in
performance APIs
        https://bugzilla.redhat.com/show_bug.cgi?id=1935945
  [ 22 ] Bug #1935946 - CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip
        https://bugzilla.redhat.com/show_bug.cgi?id=1935946
  [ 23 ] Bug #1935947 - CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip
and Navigation
        https://bugzilla.redhat.com/show_bug.cgi?id=1935947
  [ 24 ] Bug #1935948 - CVE-2021-21178 chromium-browser: Inappropriate implementation in
Compositing
        https://bugzilla.redhat.com/show_bug.cgi?id=1935948
  [ 25 ] Bug #1935950 - CVE-2021-21169 chromium-browser: Out of bounds memory access in
V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1935950
  [ 26 ] Bug #1935951 - CVE-2021-21163 chromium-browser: Insufficient data validation in
Reader Mode
        https://bugzilla.redhat.com/show_bug.cgi?id=1935951
  [ 27 ] Bug #1935952 - CVE-2021-21175 chromium-browser: Inappropriate implementation in
Site isolation
        https://bugzilla.redhat.com/show_bug.cgi?id=1935952
  [ 28 ] Bug #1935953 - CVE-2021-21177 chromium-browser: Insufficient policy enforcement
in Autofill
        https://bugzilla.redhat.com/show_bug.cgi?id=1935953
  [ 29 ] Bug #1935954 - CVE-2021-21185 chromium-browser: Insufficient policy enforcement
in extensions
        https://bugzilla.redhat.com/show_bug.cgi?id=1935954
  [ 30 ] Bug #1935955 - CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium
        https://bugzilla.redhat.com/show_bug.cgi?id=1935955
  [ 31 ] Bug #1935956 - CVE-2021-21184 chromium-browser: Inappropriate implementation in
performance APIs
        https://bugzilla.redhat.com/show_bug.cgi?id=1935956
  [ 32 ] Bug #1935958 - CVE-2021-21168 chromium-browser: Insufficient policy enforcement
in appcache
        https://bugzilla.redhat.com/show_bug.cgi?id=1935958
  [ 33 ] Bug #1935959 - CVE-2021-21167 chromium-browser: Use after free in bookmarks
        https://bugzilla.redhat.com/show_bug.cgi?id=1935959
  [ 34 ] Bug #1935960 - CVE-2021-21188 chromium-browser: Use after free in Blink
        https://bugzilla.redhat.com/show_bug.cgi?id=1935960
  [ 35 ] Bug #1935961 - CVE-2021-21172 chromium-browser: Insufficient policy enforcement
in File System API
        https://bugzilla.redhat.com/show_bug.cgi?id=1935961
  [ 36 ] Bug #1935962 - CVE-2021-21182 chromium-browser: Insufficient policy enforcement
in navigations
        https://bugzilla.redhat.com/show_bug.cgi?id=1935962
  [ 37 ] Bug #1935963 - CVE-2021-21176 chromium-browser: Inappropriate implementation in
full screen mode
        https://bugzilla.redhat.com/show_bug.cgi?id=1935963
  [ 38 ] Bug #1935964 - CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip
        https://bugzilla.redhat.com/show_bug.cgi?id=1935964
  [ 39 ] Bug #1935965 - CVE-2021-21186 chromium-browser: Insufficient policy enforcement
in QR scanning
        https://bugzilla.redhat.com/show_bug.cgi?id=1935965
  [ 40 ] Bug #1935966 - CVE-2021-21165 chromium-browser: Object lifecycle issue in audio
        https://bugzilla.redhat.com/show_bug.cgi?id=1935966
  [ 41 ] Bug #1935967 - CVE-2021-21189 chromium-browser: Insufficient policy enforcement
in payments
        https://bugzilla.redhat.com/show_bug.cgi?id=1935967
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update chromium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------