FEDORA-EPEL-2022-9f67252d52 — security update for chromium

stable

chromium-105.0.5195.125-2.el8

FEDORA-EPEL-2022-9f67252d52 created by spot 2 years ago for Fedora EPEL 8

Update to chromium-105.0.5195.125. Fixes the following security issues:

CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612 CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 CVE-2022-2618 CVE-2022-2619 CVE-2022-2620 CVE-2022-2621 CVE-2022-2622 CVE-2022-2623 CVE-2022-2624 CVE-2022-2852 CVE-2022-2854 CVE-2022-2855 CVE-2022-2857 CVE-2022-2858 CVE-2022-2853 CVE-2022-2856 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3071 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049 CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 CVE-2022-3053 CVE-2022-3054 CVE-2022-3055 CVE-2022-3056 CVE-2022-3057 CVE-2022-3058 CVE-2022-3075 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201

You may also notice that there is not an EL7 build. This is due to newer Chromium having a dependency that is not available in EL7/EPEL7. As soon as that package arrives in EPEL7, I will start making EL7 builds again.

This update has been submitted for testing by spot.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

chromium-105.0.5195.125-2.el8

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#2095757 CVE-2022-2007 chromium-browser: Use after free in WebGPU

BZ#2095759 CVE-2022-2008 chromium-browser: Out of bounds memory access in WebGL

BZ#2095760 CVE-2022-2010 chromium-browser: Out of bounds read in compositing

BZ#2095761 CVE-2022-2011 chromium-browser: Use after free in ANGLE

BZ#2095763 CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 chromium: various flaws [epel-all]

BZ#2114693 CVE-2022-2603 chromium-browser: Use after free in Omnibox

BZ#2114694 CVE-2022-2604 chromium-browser: Use after free in Safe Browsing

BZ#2114695 CVE-2022-2605 chromium-browser: Out of bounds read in Dawn

BZ#2114696 CVE-2022-2606 chromium-browser: Use after free in Managed devices API

BZ#2114697 CVE-2022-2607 chromium-browser: Use after free in Tab Strip

BZ#2114698 CVE-2022-2608 chromium-browser: Use after free in Overview Mode

BZ#2114699 CVE-2022-2609 chromium-browser: Use after free in Nearby Share

BZ#2114700 CVE-2022-2610 chromium-browser: Insufficient policy enforcement in Background Fetch

BZ#2114701 CVE-2022-2611 chromium-browser: Inappropriate implementation in Fullscreen API

BZ#2114702 CVE-2022-2612 chromium-browser: Side-channel information leakage in Keyboard input

BZ#2114703 CVE-2022-2613 chromium-browser: Use after free in Input

BZ#2114704 CVE-2022-2614 chromium-browser: Use after free in Sign-In Flow

BZ#2114705 CVE-2022-2615 chromium-browser: Insufficient policy enforcement in Cookies

BZ#2114706 CVE-2022-2616 chromium-browser: Inappropriate implementation in Extensions API

BZ#2114707 CVE-2022-2617 chromium-browser: Use after free in Extensions API

BZ#2114708 CVE-2022-2618 chromium-browser: Insufficient validation of untrusted input in Internals

BZ#2114709 CVE-2022-2619 chromium-browser: Insufficient validation of untrusted input in Settings

BZ#2114710 CVE-2022-2620 chromium-browser: Use after free in WebUI

BZ#2114711 CVE-2022-2621 chromium-browser: Use after free in Extensions

BZ#2114712 CVE-2022-2622 chromium-browser: Insufficient validation of untrusted input in Safe Browsing

BZ#2114713 CVE-2022-2623 chromium-browser: Use after free in Offline

BZ#2114714 CVE-2022-2624 chromium-browser: Heap buffer overflow in PDF

BZ#2114716 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612 CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 ... chromium: various flaws [epel-all]

BZ#2118934 CVE-2022-2852 chromium-browser: Use after free in FedCM

BZ#2118935 CVE-2022-2854 chromium-browser: Use after free in SwiftShader

BZ#2118936 CVE-2022-2855 chromium-browser: Use after free in ANGLE

BZ#2118937 CVE-2022-2857 chromium-browser: Use after free in Blink

BZ#2118938 CVE-2022-2858 chromium-browser: Use after free in Sign-In Flow

BZ#2118939 CVE-2022-2853 chromium-browser: Heap buffer overflow in Downloads

BZ#2118941 CVE-2022-2856 chromium-browser: Insufficient validation of untrusted input in Intents

BZ#2118942 CVE-2022-2859 chromium-browser: Use after free in Chrome OS Shell

BZ#2118943 CVE-2022-2860 chromium-browser: Insufficient policy enforcement in Cookies

BZ#2118944 CVE-2022-2861 chromium-browser: Inappropriate implementation in Extensions API

BZ#2118947 CVE-2022-2852 CVE-2022-2853 CVE-2022-2854 CVE-2022-2855 CVE-2022-2856 CVE-2022-2857 CVE-2022-2858 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861 chromium: various flaws [epel-all]

BZ#2123660 CVE-2022-3038 chromium-browser: Use after free in Network Service

BZ#2123661 CVE-2022-3039 chromium-browser: Use after free in WebSQL

BZ#2123662 CVE-2022-3040 chromium-browser: Use after free in Layout

BZ#2123664 CVE-2022-3041 chromium-browser: Use after free in WebSQL

BZ#2123665 CVE-2022-3042 chromium-browser: Use after free in PhoneHub

BZ#2123666 CVE-2022-3043 chromium-browser: Heap buffer overflow in Screen Capture

BZ#2123667 CVE-2022-3044 chromium-browser: Inappropriate implementation in Site Isolation

BZ#2123668 CVE-2022-3045 chromium-browser: Insufficient validation of untrusted input in V8

BZ#2123669 CVE-2022-3046 chromium-browser: Use after free in Browser Tag

BZ#2123670 CVE-2022-3071 chromium-browser: Use after free in Tab Strip

BZ#2123671 CVE-2022-3047 chromium-browser: Insufficient policy enforcement in Extensions API

BZ#2123672 CVE-2022-3048 chromium-browser: Inappropriate implementation in Chrome OS lockscreen

BZ#2123673 CVE-2022-3049 chromium-browser: Use after free in SplitScreen

BZ#2123674 CVE-2022-3050 chromium-browser: Heap buffer overflow in WebUI

BZ#2123675 CVE-2022-3051 chromium-browser: Heap buffer overflow in Exosphere

BZ#2123676 CVE-2022-3052 chromium-browser: Heap buffer overflow in Window Manager

BZ#2123677 CVE-2022-3053 chromium-browser: Inappropriate implementation in Pointer Lock

BZ#2123678 CVE-2022-3054 chromium-browser: Insufficient policy enforcement in DevTools

BZ#2123679 CVE-2022-3055 chromium-browser: Use after free in Passwords

BZ#2123680 CVE-2022-3056 chromium-browser: Insufficient policy enforcement in Content Security Policy

BZ#2123681 CVE-2022-3057 chromium-browser: Inappropriate implementation in iframe Sandbox

BZ#2123683 CVE-2022-3058 chromium-browser: Use after free in Sign-In Flow

BZ#2123686 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049 CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 ... chromium: various flaws [epel-all]

BZ#2124154 CVE-2022-3075 chromium-browser: Insufficient data validation in Mojo

BZ#2124156 CVE-2022-3075 chromium: chromium-browser: Insufficient data validation in Mojo [epel-all]

BZ#2126918 CVE-2022-3195 chromium-browser: Out of bounds write in Storage

BZ#2126919 CVE-2022-3196 chromium-browser: Use after free in PDF

BZ#2126920 CVE-2022-3197 chromium-browser: Use after free in PDF

BZ#2126921 CVE-2022-3198 chromium-browser: Use after free in PDF

BZ#2126922 CVE-2022-3199 chromium-browser: Use after free in Frames

BZ#2126923 CVE-2022-3200 chromium-browser: Heap buffer overflow in Internals

BZ#2126924 CVE-2022-3201 chromium-browser: Insufficient validation of untrusted input in DevTools

BZ#2126926 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201 chromium: various flaws [epel-all]

chromium-105.0.5195.125-2.el8

Automated Test Results

ignored