openSUSE-SU-2022:10092-1

    Dashboard / Vulnerabilities / openSUSE-SU-2022:10092-1

    openSUSE-SU-2022:10092-1

    Published: 16 Aug 2022Last Modified: 4 Feb 2026

    Summary: Security update for chromium

    Details: This update for chromium fixes the following issues: Chromium 104.0.5112.79 (boo#1202075) * CVE-2022-2603: Use after free in Omnibox * CVE-2022-2604: Use after free in Safe Browsing * CVE-2022-2605: Out of bounds read in Dawn * CVE-2022-2606: Use after free in Managed devices API * CVE-2022-2607: Use after free in Tab Strip * CVE-2022-2608: Use after free in Overview Mode * CVE-2022-2609: Use after free in Nearby Share * CVE-2022-2610: Insufficient policy enforcement in Background Fetch * CVE-2022-2611: Inappropriate implementation in Fullscreen API * CVE-2022-2612: Side-channel information leakage in Keyboard input * CVE-2022-2613: Use after free in Input * CVE-2022-2614: Use after free in Sign-In Flow * CVE-2022-2615: Insufficient policy enforcement in Cookies * CVE-2022-2616: Inappropriate implementation in Extensions API * CVE-2022-2617: Use after free in Extensions API * CVE-2022-2618: Insufficient validation of untrusted input in Internals * CVE-2022-2619: Insufficient validation of untrusted input in Settings * CVE-2022-2620: Use after free in WebUI * CVE-2022-2621: Use after free in Extensions * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing * CVE-2022-2623: Use after free in Offline * CVE-2022-2624: Heap buffer overflow in PDF - Switch back to Clang so that we can use BTI on aarch64 * Gold is too old - doesn't understand BTI * LD crashes on aarch64 - Re-enable LTO - Prepare move to FFmpeg 5 for new channel layout (requires 5.1+)

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/Q6RNQ4ONDRAPKKAAKDX4PXEI5DY7JVBX/, https://bugzilla.suse.com/1202075, https://www.suse.com/security/cve/CVE-2022-2603, https://www.suse.com/security/cve/CVE-2022-2604, https://www.suse.com/security/cve/CVE-2022-2605, https://www.suse.com/security/cve/CVE-2022-2606, https://www.suse.com/security/cve/CVE-2022-2607, https://www.suse.com/security/cve/CVE-2022-2608, https://www.suse.com/security/cve/CVE-2022-2609, https://www.suse.com/security/cve/CVE-2022-2610, https://www.suse.com/security/cve/CVE-2022-2611, https://www.suse.com/security/cve/CVE-2022-2612, https://www.suse.com/security/cve/CVE-2022-2613, https://www.suse.com/security/cve/CVE-2022-2614, https://www.suse.com/security/cve/CVE-2022-2615, https://www.suse.com/security/cve/CVE-2022-2616, https://www.suse.com/security/cve/CVE-2022-2617, https://www.suse.com/security/cve/CVE-2022-2618, https://www.suse.com/security/cve/CVE-2022-2619, https://www.suse.com/security/cve/CVE-2022-2620, https://www.suse.com/security/cve/CVE-2022-2621, https://www.suse.com/security/cve/CVE-2022-2622, https://www.suse.com/security/cve/CVE-2022-2623, https://www.suse.com/security/cve/CVE-2022-2624

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -104.0.5112.79-bp153.2.113.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2022:10092-1 | CVE-DB