[SECURITY] Fedora 33 Update: chromium-91.0.4472.114-2.fc33

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-ca58c57bdf
2021-07-18 01:03:17.773023
--------------------------------------------------------------------------------

Name        : chromium
Product     : Fedora 33
Version     : 91.0.4472.114
Release     : 2.fc33
URL         : http://www.chromium.org/Home
Summary     : A WebKit (Blink) powered web browser that Google doesn't want you to
use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

Fix crash in ThemeService (thanks to OpenSUSE)  ----  Security fixes.
CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510
CVE-2021-30511 CVE-2021-30512  CVE-2021-30513 CVE-2021-30514 CVE-2021-30515
CVE-2021-30516 CVE-2021-30517 CVE-2021-30518 CVE-2021-30519  CVE-2021-30520
CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525
CVE-2021-30526  CVE-2021-30527 CVE-2021-30528 CVE-2021-30529 CVE-2021-30530
CVE-2021-30531 CVE-2021-30532 CVE-2021-30533  CVE-2021-30534 CVE-2021-30535
CVE-2021-30536 CVE-2021-30537 CVE-2021-30538 CVE-2021-30539 CVE-2021-30540
CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548
CVE-2021-30549 CVE-2021-30550  CVE-2021-30551 CVE-2021-30552 CVE-2021-30553
CVE-2021-30554 CVE-2021-30555 CVE-2021-30556 CVE-2021-30557
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul  6 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 91.0.4472.114-2
- fix ThemeService crash (thanks OpenSUSE)
* Wed Jun 23 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 91.0.4472.114-1
- update to 91.0.4472.114
* Tue Jun  1 2021 Tom Callaway <spot(a)fedoraproject.org&gt; - 91.0.4472.77-1
- update to 91.0.4472.77
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1965424 - CVE-2021-30521 chromium-browser: Heap buffer overflow in Autofill
        https://bugzilla.redhat.com/show_bug.cgi?id=1965424
  [ 2 ] Bug #1965425 - CVE-2021-30522 chromium-browser: Use after free in WebAudio
        https://bugzilla.redhat.com/show_bug.cgi?id=1965425
  [ 3 ] Bug #1965426 - CVE-2021-30523 chromium-browser: Use after free in WebRTC
        https://bugzilla.redhat.com/show_bug.cgi?id=1965426
  [ 4 ] Bug #1965427 - CVE-2021-30524 chromium-browser: Use after free in TabStrip
        https://bugzilla.redhat.com/show_bug.cgi?id=1965427
  [ 5 ] Bug #1965428 - CVE-2021-30525 chromium-browser: Use after free in TabGroups
        https://bugzilla.redhat.com/show_bug.cgi?id=1965428
  [ 6 ] Bug #1965429 - CVE-2021-30526 chromium-browser: Out of bounds write in TabStrip
        https://bugzilla.redhat.com/show_bug.cgi?id=1965429
  [ 7 ] Bug #1965430 - CVE-2021-30527 chromium-browser: Use after free in WebUI
        https://bugzilla.redhat.com/show_bug.cgi?id=1965430
  [ 8 ] Bug #1965431 - CVE-2021-30528 chromium-browser: Use after free in
WebAuthentication
        https://bugzilla.redhat.com/show_bug.cgi?id=1965431
  [ 9 ] Bug #1965432 - CVE-2021-30529 chromium-browser: Use after free in Bookmarks
        https://bugzilla.redhat.com/show_bug.cgi?id=1965432
  [ 10 ] Bug #1965433 - CVE-2021-30530 chromium-browser: Out of bounds memory access in
WebAudio
        https://bugzilla.redhat.com/show_bug.cgi?id=1965433
  [ 11 ] Bug #1965434 - CVE-2021-30531 chromium-browser: Insufficient policy enforcement
in Content Security Policy
        https://bugzilla.redhat.com/show_bug.cgi?id=1965434
  [ 12 ] Bug #1965435 - CVE-2021-30532 chromium-browser: Insufficient policy enforcement
in Content Security Policy
        https://bugzilla.redhat.com/show_bug.cgi?id=1965435
  [ 13 ] Bug #1965436 - CVE-2021-30533 chromium-browser: Insufficient policy enforcement
in PopupBlocker
        https://bugzilla.redhat.com/show_bug.cgi?id=1965436
  [ 14 ] Bug #1965437 - CVE-2021-30534 chromium-browser: Insufficient policy enforcement
in iFrameSandbox
        https://bugzilla.redhat.com/show_bug.cgi?id=1965437
  [ 15 ] Bug #1965438 - CVE-2021-30535 chromium-browser: Double free in ICU
        https://bugzilla.redhat.com/show_bug.cgi?id=1965438
  [ 16 ] Bug #1965439 - CVE-2021-30536 chromium-browser: Out of bounds read in V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1965439
  [ 17 ] Bug #1965440 - CVE-2021-30537 chromium-browser: Insufficient policy enforcement
in cookies
        https://bugzilla.redhat.com/show_bug.cgi?id=1965440
  [ 18 ] Bug #1965441 - CVE-2021-30538 chromium-browser: Insufficient policy enforcement
in content security policy
        https://bugzilla.redhat.com/show_bug.cgi?id=1965441
  [ 19 ] Bug #1965442 - CVE-2021-30539 chromium-browser: Insufficient policy enforcement
in content security policy
        https://bugzilla.redhat.com/show_bug.cgi?id=1965442
  [ 20 ] Bug #1965443 - CVE-2021-30540 chromium-browser: Incorrect security UI in
payments
        https://bugzilla.redhat.com/show_bug.cgi?id=1965443
  [ 21 ] Bug #1970106 - CVE-2021-30544 chromium-browser: Use after free in BFCache
        https://bugzilla.redhat.com/show_bug.cgi?id=1970106
  [ 22 ] Bug #1970107 - CVE-2021-30545 chromium-browser: Use after free in Extensions
        https://bugzilla.redhat.com/show_bug.cgi?id=1970107
  [ 23 ] Bug #1970108 - CVE-2021-30546 chromium-browser: Use after free in Autofill
        https://bugzilla.redhat.com/show_bug.cgi?id=1970108
  [ 24 ] Bug #1970109 - CVE-2021-30547 chromium-browser: Out of bounds write in ANGLE
        https://bugzilla.redhat.com/show_bug.cgi?id=1970109
  [ 25 ] Bug #1970110 - CVE-2021-30548 chromium-browser: Use after free in Loader
        https://bugzilla.redhat.com/show_bug.cgi?id=1970110
  [ 26 ] Bug #1970111 - CVE-2021-30549 chromium-browser: Use after free in Spell check
        https://bugzilla.redhat.com/show_bug.cgi?id=1970111
  [ 27 ] Bug #1970112 - CVE-2021-30550 chromium-browser: Use after free in Accessibility
        https://bugzilla.redhat.com/show_bug.cgi?id=1970112
  [ 28 ] Bug #1970113 - CVE-2021-30551 chromium-browser: Type Confusion in V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1970113
  [ 29 ] Bug #1970114 - CVE-2021-30552 chromium-browser: Use after free in Extensions
        https://bugzilla.redhat.com/show_bug.cgi?id=1970114
  [ 30 ] Bug #1970115 - CVE-2021-30553 chromium-browser: Use after free in Network
service
        https://bugzilla.redhat.com/show_bug.cgi?id=1970115
  [ 31 ] Bug #1971568 - CVE-2021-30506 chromium-browser: Incorrect security UI in Web App
Installs
        https://bugzilla.redhat.com/show_bug.cgi?id=1971568
  [ 32 ] Bug #1971569 - CVE-2021-30507 chromium-browser: Inappropriate implementation in
Offline
        https://bugzilla.redhat.com/show_bug.cgi?id=1971569
  [ 33 ] Bug #1971570 - CVE-2021-30508 chromium-browser: Heap buffer overflow in Media
Feeds
        https://bugzilla.redhat.com/show_bug.cgi?id=1971570
  [ 34 ] Bug #1971571 - CVE-2021-30509 chromium-browser: Out of bounds write in Tab Strip
        https://bugzilla.redhat.com/show_bug.cgi?id=1971571
  [ 35 ] Bug #1971572 - CVE-2021-30510 chromium-browser: Race in Aura
        https://bugzilla.redhat.com/show_bug.cgi?id=1971572
  [ 36 ] Bug #1971573 - CVE-2021-30511 chromium-browser: Out of bounds read in Tab Groups
        https://bugzilla.redhat.com/show_bug.cgi?id=1971573
  [ 37 ] Bug #1971574 - CVE-2021-30512 chromium-browser: Use after free in Notifications
        https://bugzilla.redhat.com/show_bug.cgi?id=1971574
  [ 38 ] Bug #1971575 - CVE-2021-30513 chromium-browser: Type Confusion in V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1971575
  [ 39 ] Bug #1971576 - CVE-2021-30514 chromium-browser: Use after free in Autofill
        https://bugzilla.redhat.com/show_bug.cgi?id=1971576
  [ 40 ] Bug #1971577 - CVE-2021-30516 chromium-browser: Heap buffer overflow in History
        https://bugzilla.redhat.com/show_bug.cgi?id=1971577
  [ 41 ] Bug #1971578 - CVE-2021-30517 chromium-browser: Type Confusion in V8
        https://bugzilla.redhat.com/show_bug.cgi?id=1971578
  [ 42 ] Bug #1971579 - CVE-2021-30518 chromium-browser: Heap buffer overflow in Reader
Mode
        https://bugzilla.redhat.com/show_bug.cgi?id=1971579
  [ 43 ] Bug #1971580 - CVE-2021-30519 chromium-browser: Use after free in Payments
        https://bugzilla.redhat.com/show_bug.cgi?id=1971580
  [ 44 ] Bug #1971581 - CVE-2021-30520 chromium-browser: Use after free in Tab Strip
        https://bugzilla.redhat.com/show_bug.cgi?id=1971581
  [ 45 ] Bug #1973547 - CVE-2021-30554 chromium-browser: Use after free in WebGL
        https://bugzilla.redhat.com/show_bug.cgi?id=1973547
  [ 46 ] Bug #1973548 - CVE-2021-30555 chromium-browser: Use after free in Sharing
        https://bugzilla.redhat.com/show_bug.cgi?id=1973548
  [ 47 ] Bug #1973549 - CVE-2021-30556 chromium-browser: Use after free in WebAudio
        https://bugzilla.redhat.com/show_bug.cgi?id=1973549
  [ 48 ] Bug #1973550 - CVE-2021-30557 chromium-browser: Use after free in TabGroups
        https://bugzilla.redhat.com/show_bug.cgi?id=1973550
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-ca58c57bdf' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------