Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 39: Update for Chromium 123.0.6312.86 Critical DoS Threat

fedora
Calendar Grey March 29, 2024
Dist Fedora Esm H88
Significant news for Fedora 39 concerning urgent problems in Chromium featuring various high-priority security flaws.
update to 123.0.6312.86 Critical CVE-2024-2883: Use after free in ANGLE High CVE-2024-2885: Use after free in Dawn High CVE-2024-2886: Use after free in WebCodecs High CVE-2024-288...

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

update to 123.0.6312.86 Critical CVE-2024-2883: Use after free in ANGLE High CVE-2024-2885: Use after free in Dawn High CVE-2024-2886: Use after free in WebCodecs High CVE-2024-2887: Type Confusion in WebAssembly

Change Log

* Wed Mar 27 2024 Than Ngo - 123.0.6312.86-2 - update to 123.0.6312.86 * Critical CVE-2024-2883: Use after free in ANGLE * High CVE-2024-2885: Use after free in Daw * High CVE-2024-2886: Use after free in WebCodecs * High CVE-2024-2887: Type Confusion in WebAssembly

References


[ 1 ] Bug #2271851 - CVE-2024-2883 chromium: Use after free in ANGLE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271851 [ 2 ] Bug #2271856 - CVE-2024-2885 chromium: Use after free in Dawn [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271856 [ 3 ] Bug #2271862 - CVE-2024-2886 chromium: Use after free in WebCodecs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271862 [ 4 ] Bug #2271868 - CVE-2024-2887 chromium: Type Confusion in WebAssembly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271868

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-0bb0e8f2a0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: chromium
Product: Fedora 39
Version: 123.0.6312.86
Release: 1.fc39
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here