| Summary: | chromium stable updated to 106.0.5249.119 to bring security updates | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | christian barranco <chb0> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, brtians1, davidwhodgins, fri, guillaume.royer, herman.viaene, sysadmin-bugs |
| Version: | 8 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA8-64-OK | ||
| Source RPM: | chromium-browser-stable-106.0.5249.91-1.mga8.src.rpm | CVE: | |
| Status comment: | |||
|
Description
christian barranco
2022-10-13 12:59:33 CEST
ADVISORY NOTICE PROPOSAL ======================== New chromium-browser-stable update fixes bugs and vulnerabilities Description The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.119 version, fixing many bugs and 6 vulnerabilities. Some of the security fixes are: High CVE-2022-3445: Use after free in Skia. Reported by Nan Wang (@eternalsakura13) and Yong Liu of 360 Vulnerability Research Institute on 2022-09-16 High CVE-2022-3446: Heap buffer overflow in WebSQL. Reported by Kaijie Xu (@kaijieguigui) on 2022-09-26 High CVE-2022-3447: Inappropriate implementation in Custom Tabs. Reported by Narendra Bhati of Suma Soft Pvt. Ltd. Pune (India) on 2022-09-22 High CVE-2022-3448: Use after free in Permissions API. Reported by raven at KunLun lab on 2022-09-13 High CVE-2022-3449: Use after free in Safe Browsing. Reported by asnine on 2022-09-17 High CVE-2022-3450: Use after free in Peer Connection. Reported by Anonymous on 2022-09-30 References https://bugs.mageia.org/show_bug.cgi?id=30961 https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_11.html https://blog.chromium.org/2022/09/chrome-106-beta-new-css-features.html SRPMS 8/core chromium-browser-stable-106.0.5249.119-1.mga8 PROVIDED PACKAGES ================= x86_64 chromium-browser-106.0.5249.119-1.mga8.x86_64.rpm chromium-browser-stable-106.0.5249.119-1.mga8.x86_64.rpm i586 chromium-browser-106.0.5249.119-1.mga8.i586.rpm chromium-browser-stable-106.0.5249.119-1.mga8.i586.rpm Ready for QA Assignee:
chb0 =>
qa-bugs
David Walser
2022-10-14 18:43:55 CEST
CC:
sysadmin-bugs =>
(none) MGA8-64, Gnome Installed x86_64 packages no issues - Jitsi Meet - working - youtube - working - various websites - working works for me CC:
(none) =>
brtians1 MGA8-64 MATE on Acer Aspire 5253 No installation issues. Tested with newspapersite, Google Maps and Youtube, all OK. CC:
(none) =>
herman.viaene mga8-64, plasma, nvidia-current, i7 OK: Swedish localisation Restored tabs, kept settings Tried three different login methods (2 Qr phone apps, one F2A) A few more sites incl video CC:
(none) =>
fri mga8 64 XFCE core I3 6Go RAM No installations issues, tested with: - Bank site - Streaming Websites like Netflix - Element browser client for Matrix - Facebook Ok for me CC:
(none) =>
guillaume.royer
Brian Rockwell
2022-10-17 14:17:54 CEST
Whiteboard:
(none) =>
MGA8-64-OK Validating. Advisory in Comment 1. Keywords:
(none) =>
validated_update
Dave Hodgins
2022-10-18 23:16:18 CEST
Keywords:
(none) =>
advisory An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2022-0376.html Status:
NEW =>
RESOLVED |