openSUSE-SU-2022:10119-1
Security update for chromium
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for chromium fixes the following issues: Chromium 105.0.5195.102 (boo#1203102): * CVE-2022-3075: Insufficient data validation in Mojo Chromium 105.0.5195.52 (boo#1202964): * CVE-2022-3038: Use after free in Network Service * CVE-2022-3039: Use after free in WebSQL * CVE-2022-3040: Use after free in Layout * CVE-2022-3041: Use after free in WebSQL * CVE-2022-3042: Use after free in PhoneHub * CVE-2022-3043: Heap buffer overflow in Screen Capture * CVE-2022-3044: Inappropriate implementation in Site Isolation * CVE-2022-3045: Insufficient validation of untrusted input in V8 * CVE-2022-3046: Use after free in Browser Tag * CVE-2022-3071: Use after free in Tab Strip * CVE-2022-3047: Insufficient policy enforcement in Extensions API * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen * CVE-2022-3049: Use after free in SplitScreen * CVE-2022-3050: Heap buffer overflow in WebUI * CVE-2022-3051: Heap buffer overflow in Exosphere * CVE-2022-3052: Heap buffer overflow in Window Manager * CVE-2022-3053: Inappropriate implementation in Pointer Lock * CVE-2022-3054: Insufficient policy enforcement in DevTools * CVE-2022-3055: Use after free in Passwords * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy * CVE-2022-3057: Inappropriate implementation in iframe Sandbox * CVE-2022-3058: Use after free in Sign-In Flow - Update chromium-symbolic.svg: this fixes boo#1202403. - Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.4 | chromedriver, chromium | 105.0.5195.102-bp154.2.26.1 |
Mostrar las 2 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.4 | chromedriver | 105.0.5195.102-bp154.2.26.1 |
| openSUSE Leap 15.4 | chromium | 105.0.5195.102-bp154.2.26.1 |
Referencias
- https://bugzilla.suse.com/1202403
- https://bugzilla.suse.com/1202964
- https://bugzilla.suse.com/1203102
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GAVZ7A2NRXHLI7C5TFF7GQHYKEGQIQRR/
- https://www.suse.com/security/cve/CVE-2022-3038/
- https://www.suse.com/security/cve/CVE-2022-3039/
- https://www.suse.com/security/cve/CVE-2022-3040/
- https://www.suse.com/security/cve/CVE-2022-3041/
Las 28 referencias
- https://www.suse.com/security/cve/CVE-2022-3042/
- https://www.suse.com/security/cve/CVE-2022-3043/
- https://www.suse.com/security/cve/CVE-2022-3044/
- https://www.suse.com/security/cve/CVE-2022-3045/
- https://www.suse.com/security/cve/CVE-2022-3046/
- https://www.suse.com/security/cve/CVE-2022-3047/
- https://www.suse.com/security/cve/CVE-2022-3048/
- https://www.suse.com/security/cve/CVE-2022-3049/
- https://www.suse.com/security/cve/CVE-2022-3050/
- https://www.suse.com/security/cve/CVE-2022-3051/
- https://www.suse.com/security/cve/CVE-2022-3052/
- https://www.suse.com/security/cve/CVE-2022-3053/
- https://www.suse.com/security/cve/CVE-2022-3054/
- https://www.suse.com/security/cve/CVE-2022-3055/
- https://www.suse.com/security/cve/CVE-2022-3056/
- https://www.suse.com/security/cve/CVE-2022-3057/
- https://www.suse.com/security/cve/CVE-2022-3058/
- https://www.suse.com/security/cve/CVE-2022-3071/
- https://www.suse.com/security/cve/CVE-2022-3075/
- https://www.suse.com/support/security/rating/