Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: 2024-0190 Critical: Chromium Type Confusion Addressed

mageia
Calendar Grey May 21, 2024
Dist Mageia Esm H88
The latest updates for Chromium-browser-stable address multiple security issues, including type mismatches and use-after-free weaknesses.
The chromium-browser-stable package has been updated to the 125.0.6422.60 release

Summary

The chromium-browser-stable package has been updated to the 125.0.6422.60 release. It includes 9 security fixes. Please, do note, only x86_64 is supported from now on. i586 support for linux was stopped some years ago and the community is not able to provide patches anymore for the latest Chromium code. Some of the security fixes are: * CVE-2024-4947: Type Confusion in V8. Reported by Vasily Berdnikov (@vaber_b) and Boris Larin (@oct0xor) of Kaspersky on 2024-05-13 * High CVE-2024-4948: Use after free in Dawn. Reported by wgslfuzz on 2024-04-09 * Medium CVE-2024-4949: Use after free in V8. Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2024-02-24 * Low CVE-2024-4950: Inappropriate implementation in Downloads. Reported by Shaheen Fazim on 2023-06-06 Google is aware that an exploit for CVE-2024-4947 exists in the wild.

References

- https://bugs.mageia.org/show_bug.cgi?id=33227

- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html

- https://www.cve.org/CVERecord?id=CVE-2024-4947

- https://www.cve.org/CVERecord?id=CVE-2024-4948

- https://www.cve.org/CVERecord?id=CVE-2024-4949

- https://www.cve.org/CVERecord?id=CVE-2024-4950

Topics%20covered

Topics Covered

security advisory high severity update security fix browser type confusion Mageia

Resolution

SRPMS

- 9/tainted/chromium-browser-stable-125.0.6422.60-1.1.mga9.tainted

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 21 May 2024
URL: https://advisories.mageia.org/MGASA-2024-0190.html
Type: security
CVE: CVE-2024-4947, CVE-2024-4948, CVE-2024-4949, CVE-2024-4950

Topics%20covered

Topics Covered

security advisory high severity update security fix browser type confusion Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here