Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowFedora

Fedora 38: 2023-a32ad3e643 High: Chromium Media Threats

Update to 120.0.6099.62, upstream release fixes follow security issues: * High CVE-2023-6508: Use after free in Media Stream * High CVE-2023-6509: Use after free in Side Panel Search * Medium CVE-2023-6510: Use after free in Media Capture * Low CVE-2023-6511: Inappropriate implementation in Autofill * Low CVE-2023-6512: Inappropriate implementation in Web Browser UI. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-a32ad3e643 2023-12-09 02:46:47.607643 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 38 Version : 120.0.6099.62 Release : 2.fc38 URL : https://www.chromium.org/Home/ Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 120.0.6099.62, upstream release fixes follow security issues: * High CVE-2023-6508: Use after free in Media Stream * High CVE-2023-6509: Use after free in Side Panel Search * Medium CVE-2023-6510: Use after free in Media Capture * Low CVE-2023-6511: Inappropriate implementation in Autofill * Low CVE-2023-6512: Inappropriate implementation in Web Browser UI -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 6 2023 Than Ngo - 120.0.6099.62-2 - drop unsupported ldflag which caused build failure * Tue Dec 5 2023 Than Ngo - 120.0.6099.62-1 - update to 120.0.6099.62 - fixed bz#2252874, built with control flow integrity (CFI) support * Sat Dec 2 2023 Than Ngo - 120.0.6099.56-1 - update to 120.0.6099.56 - enable qt6 UI backend * Sat Dec 2 2023 Than Ngo - 119.0.6045.199-2 - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improvedsecurity -------------------------------------------------------------------------------- References: [ 1 ] Bug #2251884 - Set -fstack-protector-strong for improved security. https://bugzilla.redhat.com/show_bug.cgi?id=2251884 [ 2 ] Bug #2252874 - Not built with CFI https://bugzilla.redhat.com/show_bug.cgi?id=2252874 [ 3 ] Bug #2253150 - CVE-2023-6508 chromium: Use after free in Media Stream [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253150 [ 4 ] Bug #2253153 - CVE-2023-6509 chromium: Use after free in Side Panel Search [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253153 [ 5 ] Bug #2253156 - CVE-2023-6510 chromium: Use after free in Media Capture [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253156 [ 6 ] Bug #2253160 - CVE-2023-6511 chromium: Inappropriate implementation in Autofill [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253160 [ 7 ] Bug #2253163 - CVE-2023-6512 chromium: Inappropriate implementation in Web Browser UI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253163 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-a32ad3e643' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ ListGuidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Google Chrome version 120.0.6099.62 resolves severe security issues, some classified as critical. Update immediately!. Fedora Update, Chromium Threat Fix, Software Security, Browser Update. . LinuxSecurity.com Team

Dec 09, 2023 Fedora