FEDORA-2022-3f28aa88cf — security update for chromium

stable

chromium-105.0.5195.125-2.fc37

FEDORA-2022-3f28aa88cf created by spot 2 years ago for Fedora 37

Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the pile of security issues it fixes:

CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612 CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 CVE-2022-2618 CVE-2022-2619 CVE-2022-2620 CVE-2022-2621 CVE-2022-2622 CVE-2022-2623 CVE-2022-2624 CVE-2022-2852 CVE-2022-2854 CVE-2022-2855 CVE-2022-2857 CVE-2022-2858 CVE-2022-2853 CVE-2022-2856 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3071 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049 CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 CVE-2022-3053 CVE-2022-3054 CVE-2022-3055 CVE-2022-3056 CVE-2022-3057 CVE-2022-3058 CVE-2022-3075 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-3f28aa88cf

This update has been submitted for testing by spot.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

spot edited this update.

2 years ago

This update has been pushed to testing.

2 years ago

cairo provided feedback 2 years ago

karma

smithp commented & provided feedback 2 years ago

karma

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

ckujau commented & provided feedback a year ago

karma

Chromium 105.0.5195.125 works nicely, yes. Are there any plans to update the chromium package to the latest stable release for Fedora 37? The security updates from November looked quite scary.

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-105.0.5195.125-2.fc37

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

3 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

BZ#2095757 CVE-2022-2007 chromium-browser: Use after free in WebGPU

BZ#2095759 CVE-2022-2008 chromium-browser: Out of bounds memory access in WebGL

BZ#2095760 CVE-2022-2010 chromium-browser: Out of bounds read in compositing

BZ#2095761 CVE-2022-2011 chromium-browser: Use after free in ANGLE

BZ#2095762 CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 chromium: various flaws [fedora-all]

BZ#2114693 CVE-2022-2603 chromium-browser: Use after free in Omnibox

BZ#2114694 CVE-2022-2604 chromium-browser: Use after free in Safe Browsing

BZ#2114695 CVE-2022-2605 chromium-browser: Out of bounds read in Dawn

BZ#2114696 CVE-2022-2606 chromium-browser: Use after free in Managed devices API

BZ#2114697 CVE-2022-2607 chromium-browser: Use after free in Tab Strip

BZ#2114698 CVE-2022-2608 chromium-browser: Use after free in Overview Mode

BZ#2114699 CVE-2022-2609 chromium-browser: Use after free in Nearby Share

BZ#2114700 CVE-2022-2610 chromium-browser: Insufficient policy enforcement in Background Fetch

BZ#2114701 CVE-2022-2611 chromium-browser: Inappropriate implementation in Fullscreen API

BZ#2114702 CVE-2022-2612 chromium-browser: Side-channel information leakage in Keyboard input

BZ#2114703 CVE-2022-2613 chromium-browser: Use after free in Input

BZ#2114704 CVE-2022-2614 chromium-browser: Use after free in Sign-In Flow

BZ#2114705 CVE-2022-2615 chromium-browser: Insufficient policy enforcement in Cookies

BZ#2114706 CVE-2022-2616 chromium-browser: Inappropriate implementation in Extensions API

BZ#2114707 CVE-2022-2617 chromium-browser: Use after free in Extensions API

BZ#2114708 CVE-2022-2618 chromium-browser: Insufficient validation of untrusted input in Internals

BZ#2114709 CVE-2022-2619 chromium-browser: Insufficient validation of untrusted input in Settings

BZ#2114710 CVE-2022-2620 chromium-browser: Use after free in WebUI

BZ#2114711 CVE-2022-2621 chromium-browser: Use after free in Extensions

BZ#2114712 CVE-2022-2622 chromium-browser: Insufficient validation of untrusted input in Safe Browsing

BZ#2114713 CVE-2022-2623 chromium-browser: Use after free in Offline

BZ#2114714 CVE-2022-2624 chromium-browser: Heap buffer overflow in PDF

BZ#2114715 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612 CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 ... chromium: various flaws [fedora-all]

BZ#2118934 CVE-2022-2852 chromium-browser: Use after free in FedCM

BZ#2118935 CVE-2022-2854 chromium-browser: Use after free in SwiftShader

BZ#2118936 CVE-2022-2855 chromium-browser: Use after free in ANGLE

BZ#2118937 CVE-2022-2857 chromium-browser: Use after free in Blink

BZ#2118938 CVE-2022-2858 chromium-browser: Use after free in Sign-In Flow

BZ#2118939 CVE-2022-2853 chromium-browser: Heap buffer overflow in Downloads

BZ#2118941 CVE-2022-2856 chromium-browser: Insufficient validation of untrusted input in Intents

BZ#2118942 CVE-2022-2859 chromium-browser: Use after free in Chrome OS Shell

BZ#2118943 CVE-2022-2860 chromium-browser: Insufficient policy enforcement in Cookies

BZ#2118944 CVE-2022-2861 chromium-browser: Inappropriate implementation in Extensions API

BZ#2118946 CVE-2022-2852 CVE-2022-2853 CVE-2022-2854 CVE-2022-2855 CVE-2022-2856 CVE-2022-2857 CVE-2022-2858 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861 chromium: various flaws [fedora-all]

BZ#2123660 CVE-2022-3038 chromium-browser: Use after free in Network Service

BZ#2123661 CVE-2022-3039 chromium-browser: Use after free in WebSQL

BZ#2123662 CVE-2022-3040 chromium-browser: Use after free in Layout

BZ#2123664 CVE-2022-3041 chromium-browser: Use after free in WebSQL

BZ#2123665 CVE-2022-3042 chromium-browser: Use after free in PhoneHub

BZ#2123666 CVE-2022-3043 chromium-browser: Heap buffer overflow in Screen Capture

BZ#2123667 CVE-2022-3044 chromium-browser: Inappropriate implementation in Site Isolation

BZ#2123668 CVE-2022-3045 chromium-browser: Insufficient validation of untrusted input in V8

BZ#2123669 CVE-2022-3046 chromium-browser: Use after free in Browser Tag

BZ#2123670 CVE-2022-3071 chromium-browser: Use after free in Tab Strip

BZ#2123671 CVE-2022-3047 chromium-browser: Insufficient policy enforcement in Extensions API

BZ#2123672 CVE-2022-3048 chromium-browser: Inappropriate implementation in Chrome OS lockscreen

BZ#2123673 CVE-2022-3049 chromium-browser: Use after free in SplitScreen

BZ#2123674 CVE-2022-3050 chromium-browser: Heap buffer overflow in WebUI

BZ#2123675 CVE-2022-3051 chromium-browser: Heap buffer overflow in Exosphere

BZ#2123676 CVE-2022-3052 chromium-browser: Heap buffer overflow in Window Manager

BZ#2123677 CVE-2022-3053 chromium-browser: Inappropriate implementation in Pointer Lock

BZ#2123678 CVE-2022-3054 chromium-browser: Insufficient policy enforcement in DevTools

BZ#2123679 CVE-2022-3055 chromium-browser: Use after free in Passwords

BZ#2123680 CVE-2022-3056 chromium-browser: Insufficient policy enforcement in Content Security Policy

BZ#2123681 CVE-2022-3057 chromium-browser: Inappropriate implementation in iframe Sandbox

BZ#2123683 CVE-2022-3058 chromium-browser: Use after free in Sign-In Flow

BZ#2123685 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049 CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 ... chromium: various flaws [fedora-all]

BZ#2124154 CVE-2022-3075 chromium-browser: Insufficient data validation in Mojo

BZ#2124155 CVE-2022-3075 chromium: chromium-browser: Insufficient data validation in Mojo [fedora-all]

BZ#2126918 CVE-2022-3195 chromium-browser: Out of bounds write in Storage

BZ#2126919 CVE-2022-3196 chromium-browser: Use after free in PDF

BZ#2126920 CVE-2022-3197 chromium-browser: Use after free in PDF

BZ#2126921 CVE-2022-3198 chromium-browser: Use after free in PDF

BZ#2126922 CVE-2022-3199 chromium-browser: Use after free in Frames

BZ#2126923 CVE-2022-3200 chromium-browser: Heap buffer overflow in Internals

BZ#2126924 CVE-2022-3201 chromium-browser: Insufficient validation of untrusted input in DevTools

BZ#2126925 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201 chromium: various flaws [fedora-all]

chromium-105.0.5195.125-2.fc37

Automated Test Results

ignored