Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8 MGASA-2022-0451 Critical: Chromium-Browser Fixes

mageia
Calendar Grey December 7, 2022
Dist Mageia Esm H88
The Chromium-browser-stable package in Mageia has been upgraded to address multiple security flaws and bugs, which encompasses several critical vulnerabilities.
The chromium-browser-stable package has been updated to the new 108 branch with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities, together with 107.0.5304.121 and...

Summary

The chromium-browser-stable package has been updated to the new 108 branch with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities, together with 107.0.5304.121 and 108.0.5359.71.
Some of the security fixes are -
CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy) on 2022-10-27 CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute on 2022-11-04 CVE-2022-4176: Out of bounds write in Lacros Graphics. Reported by @ginggilBesel on 2022-09-08 CVE-2022-4177: Use after free in Extensions. Reported by Chaoyuan Peng (@ret2happy) on 2022-10-28 CVE-2022-4178: Use after free in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2022-10-18 CVE-2022-4179: Use after free in Audio. Reported by Sergei Glazunov of Google Project Zero on 2022-10-24 CVE-2022-4180: Use after free in Mojo. Reported by Anonymous on 2022-10-26 CVE-2022-4181: Use after free in Forms. Reported by Aviv A. on...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=31205

- https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html

- https://www.cve.org/CVERecord?id=CVE-2022-4135

- https://www.cve.org/CVERecord?id=CVE-2022-4174

- https://www.cve.org/CVERecord?id=CVE-2022-4175

- https://www.cve.org/CVERecord?id=CVE-2022-4176

- https://www.cve.org/CVERecord?id=CVE-2022-4177

- https://www.cve.org/CVERecord?id=CVE-2022-4178

- https://www.cve.org/CVERecord?id=CVE-2022-4179

- https://www.cve.org/CVERecord?id=CVE-2022-4180

- https://www.cve.org/CVERecord?id=CVE-2022-4181

- https://www.cve.org/CVERecord?id=CVE-2022-4182

- https://www.cve.org/CVERecord?id=CVE-2022-4183

- https://www.cve.org/CVERecord?id=CVE-2022-4184

- https://www.cve.org/CVERecord?id=CVE-2022-4185

- https://www.cve.org/CVERecord?id=CVE-2022-4186

- https://www.cve.org/CVERecord?id=CVE-2022-4187

- https://www.cve.org/CVERecord?id=CVE-2022-4188

- https://www.cve.org/CVERecord?id=CVE-2022-4189

- https://www.cve.org/CVERecord?id=CVE-2022-4190

- https://www.cve.org/CVERecord?id=CVE-2022-4191

- https://www.cve.org/CVERecord?id=CVE-2022-4192

- https://www.cve.org/CVERecord?id=CVE-2022-4193

- https://www.cve.org/CVERecord?id=CVE-2022-4194

- https://www.cve.org/CVERecord?id=CVE-2022-4195

- https://www.cve.org/CVERecord?id=CVE-2022-4262

Topics%20covered

Topics Covered

security advisory critical fix out of bounds chromium-browser use after free type confusion Mageia

Resolution

SRPMS

- 8/core/chromium-browser-stable-108.0.5359.94-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0451.html
Type: security
CVE: CVE-2022-4135, CVE-2022-4174, CVE-2022-4175, CVE-2022-4176, CVE-2022-4177, CVE-2022-4178, CVE-2022-4179, CVE-2022-4180, CVE-2022-4181, CVE-2022-4182, CVE-2022-4183, CVE-2022-4184, CVE-2022-4185, CVE-2022-4186, CVE-2022-4187, CVE-2022-4188, CVE-2022-4189, CVE-2022-4190, CVE-2022-4191, CVE-2022-4192, CVE-2022-4193, CVE-2022-4194, CVE-2022-4195, CVE-2022-4262

Topics%20covered

Topics Covered

security advisory critical fix out of bounds chromium-browser use after free type confusion Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here