Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Mageia: MGASA-2022-0377 Critical: Firefox Browser Memory Corruption

mageia
Calendar Grey October 18, 2022
Dist Mageia Esm H88
Recent updates to the chromium-browser-stable address a variety of security flaws, enhancing safety for users.
The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.119 version, fixing many bugs and 6 vulnerabilities

Summary

The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.119 version, fixing many bugs and 6 vulnerabilities. Some of the security fixes are:
High CVE-2022-3445: Use after free in Skia. Reported by Nan Wang (@eternalsakura13) and Yong Liu of 360 Vulnerability Research Institute on 2022-09-16 High CVE-2022-3446: Heap buffer overflow in WebSQL. Reported by Kaijie Xu (@kaijieguigui) on 2022-09-26 High CVE-2022-3447: Inappropriate implementation in Custom Tabs. Reported by Narendra Bhati of Suma Soft Pvt. Ltd. Pune (India) on 2022-09-22 High CVE-2022-3448: Use after free in Permissions API. Reported by raven at KunLun lab on 2022-09-13 High CVE-2022-3449: Use after free in Safe Browsing. Reported by asnine on 2022-09-17 High CVE-2022-3450: Use after free in Peer Connection. Reported by Anonymous on 2022-09-30

References

- https://bugs.mageia.org/show_bug.cgi?id=30961

- https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_11.html

- https://blog.chromium.org/2022/09/chrome-106-beta-new-css-features.html

- https://www.cve.org/CVERecord?id=CVE-2022-3445

- https://www.cve.org/CVERecord?id=CVE-2022-3446

- https://www.cve.org/CVERecord?id=CVE-2022-3447

- https://www.cve.org/CVERecord?id=CVE-2022-3448

- https://www.cve.org/CVERecord?id=CVE-2022-3449

- https://www.cve.org/CVERecord?id=CVE-2022-3450

Topics%20covered

Topics Covered

security advisory heap overflow browser fix use after free mageia

Resolution

SRPMS

- 8/core/chromium-browser-stable-106.0.5249.119-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 18 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0376.html
Type: security
CVE: CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450

Topics%20covered

Topics Covered

security advisory heap overflow browser fix use after free mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.