Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: 2024-44edce9689 High: Chromium Scheduling Issues and Overflows

fedora
Calendar Grey May 23, 2024
Dist Fedora Esm H88
Fedora's update to Chromium 125.0.6422.76 tackles severe vulnerabilities including memory corruption and unsafe pointer dereferencing.
update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High...

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High CVE-2024-5160: Heap buffer overflow in Dawn

Topics%20covered

Topics Covered

security advisory high severity buffer overflow Fedora chromium type confusion scheduling issue

Change Log

* Wed May 22 2024 Than Ngo - 125.0.6422.76-1 - fix bz#2282246, update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High CVE-2024-5160: Heap buffer overflow in Dawn - cleanup * Mon May 20 2024 Than Ngo - 125.0.6422.60-3 - remove unneeded BRs - workarounds for el7 build * Sun May 19 2024 Than Ngo - 125.0.6422.60-2 - fix build errors on el7

References


[ 1 ] Bug #2282246 - 125.0.6422.76 available, fixes multiple High CVES https://bugzilla.redhat.com/show_bug.cgi?id=2282246

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-44edce9689' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: chromium
Product: Fedora 40
Version: 125.0.6422.76
Release: 1.fc40
URL: http://www.chromium.org/Home
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Topics%20covered

Topics Covered

security advisory high severity buffer overflow Fedora chromium type confusion scheduling issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here