Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Mageia: MGASA-2023-0090 Critical: Chromium Security Issues

mageia
Calendar Grey March 11, 2023
Dist Mageia Esm H88
Important modifications issued for chromium-browser-stable correcting various concerns such as memory leaks and type misalignment.
High CVE-2023-1213: Use after free in Swiftshader

Summary

High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30
High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03
High CVE-2023-1215: Type Confusion in CSS. Reported by Anonymous on 2023-02-17
High CVE-2023-1216: Use after free in DevTools. Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2023-02-21
High CVE-2023-1217: Stack buffer overflow in Crash reporting. Reported by sunburst of Ant Group Tianqiong Security Lab on 2023-02-03
High CVE-2023-1218: Use after free in WebRTC. Reported by Anonymous on 2023-02-07
High CVE-2023-1219: Heap buffer overflow in Metrics. Reported by Sergei Glazunov of Google Project Zero on 2023-02-13
High CVE-2023-1220: Heap buffer overflow in UMA. Reported by Sergei Glazunov of Google Project Zero on 2023-02-17
Medium CVE-2023-1221: Insufficient policy enforcement in Extensions API. Reported by Ahmed ElMasry on 2022-11-16
Medium CVE-2023-1222: Heap b...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=31645

- https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html

- - https://www.cve.org/CVERecord?id=CVE-2023-1213

- https://www.cve.org/CVERecord?id=CVE-2023-1214

- https://www.cve.org/CVERecord?id=CVE-2023-1215

- https://www.cve.org/CVERecord?id=CVE-2023-1216

- https://www.cve.org/CVERecord?id=CVE-2023-1217

- https://www.cve.org/CVERecord?id=CVE-2023-1218

- https://www.cve.org/CVERecord?id=CVE-2023-1219

- https://www.cve.org/CVERecord?id=CVE-2023-1220

- https://www.cve.org/CVERecord?id=CVE-2023-1221

- https://www.cve.org/CVERecord?id=CVE-2023-1222

- https://www.cve.org/CVERecord?id=CVE-2023-1223

- https://www.cve.org/CVERecord?id=CVE-2023-1224

- https://www.cve.org/CVERecord?id=CVE-2023-1225

- https://www.cve.org/CVERecord?id=CVE-2023-1226

- https://www.cve.org/CVERecord?id=CVE-2023-1227

- https://www.cve.org/CVERecord?id=CVE-2023-1228

- https://www.cve.org/CVERecord?id=CVE-2023-1229

- https://www.cve.org/CVERecord?id=CVE-2023-1230

- https://www.cve.org/CVERecord?id=CVE-2023-1231

- https://www.cve.org/CVERecord?id=CVE-2023-1232

- https://www.cve.org/CVERecord?id=CVE-2023-1233

- https://www.cve.org/CVERecord?id=CVE-2023-1234

- https://www.cve.org/CVERecord?id=CVE-2023-1235

- https://www.cve.org/CVERecord?id=CVE-2023-1236

Topics%20covered

Topics Covered

security advisory security patch exploit fix browser security use after free type confusion Mageia

Resolution

SRPMS

- 8/core/chromium-browser-stable-111.0.5563.64-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 11 Mar 2023
URL: https://advisories.mageia.org/MGASA-2023-0090.html
Type: security
CVE: CVE-2023-1213, CVE-2023-1214, CVE-2023-1215, CVE-2023-1216, CVE-2023-1217, CVE-2023-1218, CVE-2023-1219, CVE-2023-1220, CVE-2023-1221, CVE-2023-1222, CVE-2023-1223, CVE-2023-1224, CVE-2023-1225, CVE-2023-1226, CVE-2023-1227, CVE-2023-1228, CVE-2023-1229, CVE-2023-1230, CVE-2023-1231, CVE-2023-1232, CVE-2023-1233, CVE-2023-1234, CVE-2023-1235, CVE-2023-1236

Topics%20covered

Topics Covered

security advisory security patch exploit fix browser security use after free type confusion Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.