openSUSE-SU-2022:10009-1
Security update for chromium
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for chromium fixes the following issues: Chromium 102.0.5005.115 (boo#1200423) * CVE-2022-2007: Use after free in WebGPU * CVE-2022-2008: Out of bounds memory access in WebGL * CVE-2022-2010: Out of bounds read in compositing * CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61 (boo#1199893) * CVE-2022-1853: Use after free in Indexed DB * CVE-2022-1854: Use after free in ANGLE * CVE-2022-1855: Use after free in Messaging * CVE-2022-1856: Use after free in User Education * CVE-2022-1857: Insufficient policy enforcement in File System API * CVE-2022-1858: Out of bounds read in DevTools * CVE-2022-1859: Use after free in Performance Manager * CVE-2022-1860: Use after free in UI Foundations * CVE-2022-1861: Use after free in Sharing * CVE-2022-1862: Inappropriate implementation in Extensions * CVE-2022-1863: Use after free in Tab Groups * CVE-2022-1864: Use after free in WebApp Installs * CVE-2022-1865: Use after free in Bookmarks * CVE-2022-1866: Use after free in Tablet Mode * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer * CVE-2022-1868: Inappropriate implementation in Extensions API * CVE-2022-1869: Type Confusion in V8 * CVE-2022-1870: Use after free in App Service * CVE-2022-1871: Insufficient policy enforcement in File System API * CVE-2022-1872: Insufficient policy enforcement in Extensions API * CVE-2022-1873: Insufficient policy enforcement in COOP * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing * CVE-2022-1875: Inappropriate implementation in PDF * CVE-2022-1876: Heap buffer overflow in DevTools
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | chromedriver, chromium | 102.0.5005.115-bp153.2.101.1 |
Afficher les 2 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | chromedriver | 102.0.5005.115-bp153.2.101.1 |
| openSUSE Leap 15.3 | chromium | 102.0.5005.115-bp153.2.101.1 |
Références
- https://bugzilla.suse.com/1199893
- https://bugzilla.suse.com/1200139
- https://bugzilla.suse.com/1200423
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RUXRSXC3TACZ74MCVMECNI7P2X6JM2NF/
- https://www.suse.com/security/cve/CVE-2022-1853/
- https://www.suse.com/security/cve/CVE-2022-1854/
- https://www.suse.com/security/cve/CVE-2022-1855/
- https://www.suse.com/security/cve/CVE-2022-1856/
Les 33 références
- https://www.suse.com/security/cve/CVE-2022-1857/
- https://www.suse.com/security/cve/CVE-2022-1858/
- https://www.suse.com/security/cve/CVE-2022-1859/
- https://www.suse.com/security/cve/CVE-2022-1860/
- https://www.suse.com/security/cve/CVE-2022-1861/
- https://www.suse.com/security/cve/CVE-2022-1862/
- https://www.suse.com/security/cve/CVE-2022-1863/
- https://www.suse.com/security/cve/CVE-2022-1864/
- https://www.suse.com/security/cve/CVE-2022-1865/
- https://www.suse.com/security/cve/CVE-2022-1866/
- https://www.suse.com/security/cve/CVE-2022-1867/
- https://www.suse.com/security/cve/CVE-2022-1868/
- https://www.suse.com/security/cve/CVE-2022-1869/
- https://www.suse.com/security/cve/CVE-2022-1870/
- https://www.suse.com/security/cve/CVE-2022-1871/
- https://www.suse.com/security/cve/CVE-2022-1872/
- https://www.suse.com/security/cve/CVE-2022-1873/
- https://www.suse.com/security/cve/CVE-2022-1874/
- https://www.suse.com/security/cve/CVE-2022-1875/
- https://www.suse.com/security/cve/CVE-2022-1876/
- https://www.suse.com/security/cve/CVE-2022-2007/
- https://www.suse.com/security/cve/CVE-2022-2008/
- https://www.suse.com/security/cve/CVE-2022-2010/
- https://www.suse.com/security/cve/CVE-2022-2011/
- https://www.suse.com/support/security/rating/