Stay Secure with the Latest Linux Advisories

security advisoryhigh severitybuffer overflow

Fedora 40: 2024-44edce9689 High: Chromium Scheduling Issues and Overflows

update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High CVE-2024-5160: Heap buffer overflow in Dawn. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-44edce9689 2024-05-23 01:08:07.997646 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 40 Version : 125.0.6422.76 Release : 1.fc40 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High CVE-2024-5160: Heap buffer overflow in Dawn -------------------------------------------------------------------------------- ChangeLog: * Wed May 22 2024 Than Ngo - 125.0.6422.76-1 - fix bz#2282246, update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflow in ANGLE * High CVE-2024-5160: Heap buffer overflow in Dawn - cleanup * Mon May 20 2024 Than Ngo - 125.0.6422.60-3 - remove unneeded BRs - workarounds for el7 build * Sun May 19 2024 Than Ngo - 125.0.6422.60-2 - fix build errors on el7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2282246 - 125.0.6422.76 available, fixes multiple High CVES https://bugzilla.redhat.com/show_bug.cgi?id=2282246 -------------------------------------------------------------------------------- This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-44edce9689' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora's update to Chromium 125.0.6422.76 tackles severe vulnerabilities including memory corruption and unsafe pointer dereferencing.. Fedora Update, Chromium Security, High CVEs, Open Source Update. . LinuxSecurity.com Team

May 23, 2024 Fedora