Описание
Security update for chromium
This update for chromium fixes the following issues:
- Chromium 107.0.5304.110 (boo#1205221)
- CVE-2022-3885: Use after free in V8
- CVE-2022-3886: Use after free in Speech Recognition
- CVE-2022-3887: Use after free in Web Workers
- CVE-2022-3888: Use after free in WebCodecs
- CVE-2022-3889: Type Confusion in V8
- CVE-2022-3890: Heap buffer overflow in Crashpad
Список пакетов
SUSE Package Hub 15 SP3
SUSE Package Hub 15 SP4
openSUSE Leap 15.3
openSUSE Leap 15.4
Ссылки
- E-Mail link for openSUSE-SU-2022:10201-1
- SUSE Security Ratings
- SUSE Bug 1205221
- SUSE CVE CVE-2022-3885 page
- SUSE CVE CVE-2022-3886 page
- SUSE CVE CVE-2022-3887 page
- SUSE CVE CVE-2022-3888 page
- SUSE CVE CVE-2022-3889 page
- SUSE CVE CVE-2022-3890 page
Описание
Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3885
- SUSE Bug 1205221
Описание
Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3886
- SUSE Bug 1205221
Описание
Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3887
- SUSE Bug 1205221
Описание
Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3888
- SUSE Bug 1205221
Описание
Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3889
- SUSE Bug 1205221
Описание
Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2022-3890
- SUSE Bug 1205221