MGASA-2022-0130

Dashboard / Vulnerabilities / MGASA-2022-0130

MGASA-2022-0130

Summary: Updated chromium-browser-stable packages fix security vulnerability

Details: Use after free in Portals. (CVE-2022-1125) Use after free in QR Code Generator. (CVE-2022-1127) Inappropriate implementation in Web Share API. (CVE-2022-1128) Inappropriate implementation in Full Screen Mode. (CVE-2022-1129) Insufficient validation of untrusted input in WebOTP. (CVE-2022-1130) Use after free in Cast UI. (CVE-2022-1131) Inappropriate implementation in Virtual Keyboard. (CVE-2022-1132) Use after free in WebRTC. (CVE-2022-1133) Type Confusion in V8. (CVE-2022-1134) Use after free in Shopping Cart. (CVE-2022-1135) Use after free in Tab Strip. (CVE-2022-1136) Inappropriate implementation in Extensions. (CVE-2022-1137) Inappropriate implementation in Web Cursor. (CVE-2022-1138) Inappropriate implementation in Background Fetch API. (CVE-2022-1139) Use after free in File Manager. (CVE-2022-1141) Heap buffer overflow in WebUI. (CVE-2022-1142) Heap buffer overflow in WebUI. (CVE-2022-1143) Use after free in WebUI. (CVE-2022-1144) Use after free in Extensions. (CVE-2022-1145) Inappropriate implementation in Resource Timing. (CVE-2022-1146)

References: https://advisories.mageia.org/MGASA-2022-0130.html, https://bugs.mageia.org/show_bug.cgi?id=30222, https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html