openSUSE-SU-2022:10099-1

Dashboard / Vulnerabilities / openSUSE-SU-2022:10099-1

openSUSE-SU-2022:10099-1

Summary: Security update for chromium

Details: This update for chromium fixes the following issues: Chromium 104.0.5112.101 (boo#1202509): * CVE-2022-2852: Use after free in FedCM * CVE-2022-2854: Use after free in SwiftShader * CVE-2022-2855: Use after free in ANGLE * CVE-2022-2857: Use after free in Blink * CVE-2022-2858: Use after free in Sign-In Flow * CVE-2022-2853: Heap buffer overflow in Downloads * CVE-2022-2856: Insufficient validation of untrusted input in Intents * CVE-2022-2859: Use after free in Chrome OS Shell * CVE-2022-2860: Insufficient policy enforcement in Cookies * CVE-2022-2861: Inappropriate implementation in Extensions API - Re-enable our version of chrome-wrapper - Set no sandbox if root is being used (https://crbug.com/638180)

References: https://lists.opensuse.org/archives/list/[email protected]/thread/KPLXDXLKSIMQN4L3UUXMVBTXFIP5Y7BC/, https://bugzilla.suse.com/1202509, https://www.suse.com/security/cve/CVE-2022-2852, https://www.suse.com/security/cve/CVE-2022-2853, https://www.suse.com/security/cve/CVE-2022-2854, https://www.suse.com/security/cve/CVE-2022-2855, https://www.suse.com/security/cve/CVE-2022-2856, https://www.suse.com/security/cve/CVE-2022-2857, https://www.suse.com/security/cve/CVE-2022-2858, https://www.suse.com/security/cve/CVE-2022-2859, https://www.suse.com/security/cve/CVE-2022-2860, https://www.suse.com/security/cve/CVE-2022-2861