MGASA-2021-0565 - Updated chromium-browser-stable packages fix security vulnerabilities

Publication date: 19 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0565.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-4098,
     CVE-2021-4099,
     CVE-2021-4100,
     CVE-2021-4101,
     CVE-2021-4102

Updated chromium-browser-stable packages fix security vulnerabilities.

The chromium-browser-stable package has been updated to 96.0.4664.110
version that fixes multiples security vulnerabilities.  One of these CVEs
is known to be actively exploited.

Insufficient data validation in Mojo. (CVE-2021-4098)

Use after free in Swiftshader. (CVE-2021-4099)

Object lifecycle issue in ANGLE. (CVE-2021-4100)

Heap buffer overflow in Swiftshader. (CVE-2021-4101)

Use after free in V8. (CVE-2021-4102)

References:
- https://bugs.mageia.org/show_bug.cgi?id=29765
- https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4098
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4099
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4100
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4101
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4102

SRPMS:
- 8/core/chromium-browser-stable-96.0.4664.110-1.mga8

Mageia 2021-0565: chromium-browser-stable security update

Updated chromium-browser-stable packages fix security vulnerabilities

Summary

Updated chromium-browser-stable packages fix security vulnerabilities.
The chromium-browser-stable package has been updated to 96.0.4664.110 version that fixes multiples security vulnerabilities. One of these CVEs is known to be actively exploited.
Insufficient data validation in Mojo. (CVE-2021-4098)
Use after free in Swiftshader. (CVE-2021-4099)
Object lifecycle issue in ANGLE. (CVE-2021-4100)
Heap buffer overflow in Swiftshader. (CVE-2021-4101)
Use after free in V8. (CVE-2021-4102)

References

- https://bugs.mageia.org/show_bug.cgi?id=29765

- https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4098

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4099

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4100

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4101

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4102

Resolution

MGASA-2021-0565 - Updated chromium-browser-stable packages fix security vulnerabilities

SRPMS

- 8/core/chromium-browser-stable-96.0.4664.110-1.mga8

Severity
Publication date: 19 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0565.html
Type: security
CVE: CVE-2021-4098, CVE-2021-4099, CVE-2021-4100, CVE-2021-4101, CVE-2021-4102

Related News

5.ShakingHands Esm H320
3 - 5 min read
There has been a promising shift in the tech industry, with major companies pledging to release products with built-in security features. This
18.WifiCutout Landscape Esm H320
2 - 3 min read
A novel attack called TunnelVision has been discovered. It compromises the security of virtually all VPN apps, rendering their purpose useless. The
21.Globe RadiatingCode Esm H320
2 - 3 min read
The recent discovery of a backdoor in XZ Utils , a widely used Linux tool, raises concerns about the security of the open-source ecosystem. While
13.Lock StylizedMotherboard Esm H320
1 - 2 min read
Spiral Linux is a Debian-based distribution that offers a range of desktop environments, making it stand out from other Linux distributions. In
32.Lock Code Circular Esm H320
2 - 3 min read
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned
1.Penguin Landscape Esm H320
2 - 3 min read
The recent release of AlmaLinux 9.4 , closely aligned with Red Hat Enterprise Linux (RHEL) 9.4 , presents Linux admins and infosec professionals
11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software
2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved