Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 39: FEDORA-2024-4e0ea1c22e High: Chromium Multiple Issues

update to 125.0.6422.141 High CVE-2024-5493: Heap buffer overflow in WebRTC High CVE-2024-5494: Use after free in Dawn High CVE-2024-5495: Use after free in Dawn High CVE-2024-5496: Use after free in Media Session. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-4e0ea1c22e 2024-06-02 03:36:56.060529 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 39 Version : 125.0.6422.141 Release : 1.fc39 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: update to 125.0.6422.141 High CVE-2024-5493: Heap buffer overflow in WebRTC High CVE-2024-5494: Use after free in Dawn High CVE-2024-5495: Use after free in Dawn High CVE-2024-5496: Use after free in Media Session High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs High CVE-2024-5498: Use after free in Presentation API High CVE-2024-5499: Out of bounds write in Streams API -------------------------------------------------------------------------------- ChangeLog: * Fri May 31 2024 Than Ngo - 125.0.6422.141-1 - update to 125.0.6422.141 * High CVE-2024-5493: Heap buffer overflow in WebRTC * High CVE-2024-5494: Use after free in Dawn * High CVE-2024-5495: Use after free in Dawn * High CVE-2024-5496: Use after free in Media Session * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs * High CVE-2024-5498: Use after free in Presentation API * High CVE-2024-5499: Out of bounds write in Streams API - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams - cleanup chromium.conf * Wed May 29 2024 Than Ngo - 125.0.6422.112-3 - build against noopenh264 * Tue May28 2024 Than Ngo - 125.0.6422.112-2 - Workaround for build error on pp64le -------------------------------------------------------------------------------- References: [ 1 ] Bug #2264332 - Chromium is unable to send/receive video on MS Teams https://bugzilla.redhat.com/show_bug.cgi?id=2264332 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4e0ea1c22e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora 39 Chromium update addresses several critical CVEs impacting WebRTC and Media Sessions; necessary patches are now available.. Chromium Security Advisory, Fedora Update Notification, Heap Buffer Overflow, WebRTC Security Fix. . LinuxSecurity.com Team

Jun 02, 2024 Fedora