Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 482
Alerts This Week
Warning Icon 1 482

Fedora 41: FEDORA-2024-791faa660a High: chromium Type Confusion

fedora
Calendar Grey December 7, 2024
Scroller Fedora
The recent Fedora 41 update for Chromium tackles a critical Type Confusion vulnerability, enhancing the security of user browsing experiences.
Chromium is an open-source web browser, powered by WebKit (Blink).

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to 131.0.6778.108 High CVE-2024-12053: Type Confusion in V8

Change Log

* Wed Dec 4 2024 Than Ngo - 131.0.6778.108-1 - Update to 131.0.6778.108 * High CVE-2024-12053: Type Confusion in V8

References


[ 1 ] Bug #2329204 - CVE-2024-9369 chromium: Insufficient data validation in Mojo [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2329204 [ 2 ] Bug #2329205 - CVE-2024-9369 chromium: Insufficient data validation in Mojo [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2329205 [ 3 ] Bug #2329208 - CVE-2024-7025 chromium: Integer overflow in Layout [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2329208 [ 4 ] Bug #2329209 - CVE-2024-7025 chromium: Integer overflow in Layout [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2329209 [ 5 ] Bug #2330232 - CVE-2024-12053 chromium: Type Confusion in V8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330232 [ 6 ] Bug #2330233 - CVE-2024-12053 chromium: Type Confusion in V8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330233

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-791faa660a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: chromium
Product: Fedora 41
Version: 131.0.6778.108
Release: 1.fc41
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.