Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Fedora 41: FEDORA-2024-ccaff13d21 high: chromium type confusion

fedora
Calendar Grey December 13, 2024
Scroller Fedora
Critical patch released for Fedora 41 focusing on chromium vulnerabilities involving race conditions and buffer overflows.
Update to 131.0.6778.139 High CVE-2024-12381: Type Confusion in V8 High CVE-2024-12382: Use after free in Translate

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update Information:

Update to 131.0.6778.139 High CVE-2024-12381: Type Confusion in V8 High CVE-2024-12382: Use after free in Translate

Change Log

* Wed Dec 11 2024 Than Ngo - 131.0.6778.139-1 - Update to 131.0.6778.139 * High CVE-2024-12381: Type Confusion in V8 * High CVE-2024-12382: Use after free in Translate

References


[ 1 ] Bug #2331786 - CVE-2024-12381 chromium: Type Confusion in V8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2331786 [ 2 ] Bug #2331787 - CVE-2024-12381 chromium: Type Confusion in V8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2331787 [ 3 ] Bug #2331788 - CVE-2024-12382 chromium: Use after free in Translate [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2331788 [ 4 ] Bug #2331789 - CVE-2024-12382 chromium: Use after free in Translate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2331789

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ccaff13d21' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: chromium
Product: Fedora 41
Version: 131.0.6778.139
Release: 1.fc41
Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.