FEDORA-2023-a32ad3e643 — security update for chromium

stable

chromium-120.0.6099.62-2.fc38

FEDORA-2023-a32ad3e643 created by than 9 months ago for Fedora 38

Update to 120.0.6099.62, upstream release fixes follow security issues:

High CVE-2023-6508: Use after free in Media Stream
High CVE-2023-6509: Use after free in Side Panel Search
Medium CVE-2023-6510: Use after free in Media Capture
Low CVE-2023-6511: Inappropriate implementation in Autofill
Low CVE-2023-6512: Inappropriate implementation in Web Browser UI

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-a32ad3e643

This update has been submitted for testing by than.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago

boycottsystemd1 provided feedback 9 months ago

karma

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-120.0.6099.62-2.fc38

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

9 months ago

approved

9 months ago

BZ#2251884 Set -fstack-protector-strong for improved security.

BZ#2252874 Not built with CFI

BZ#2253150 CVE-2023-6508 chromium: Use after free in Media Stream [fedora-all]

BZ#2253153 CVE-2023-6509 chromium: Use after free in Side Panel Search [fedora-all]

BZ#2253156 CVE-2023-6510 chromium: Use after free in Media Capture [fedora-all]

BZ#2253160 CVE-2023-6511 chromium: Inappropriate implementation in Autofill [fedora-all]

BZ#2253163 CVE-2023-6512 chromium: Inappropriate implementation in Web Browser UI [fedora-all]

chromium-120.0.6099.62-2.fc38

Automated Test Results

ignored