Security update for chromium
This update for chromium fixes the following issues: Chromium 102.0.5005.115 (boo#1200423) * CVE-2022-2007: Use after free in WebGPU * CVE-2022-2008: Out of bounds memory access in WebGL * CVE-2022-2010: Out of bounds read in compositing * CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61 (boo#1199893) * CVE-2022-1853: Use after free in Indexed DB * CVE-2022-1854: Use after free in ANGLE * CVE-2022-1855: Use after free in Messaging * CVE-2022-1856: Use after free in User Education * CVE-2022-1857: Insufficient policy enforcement in File System API * CVE-2022-1858: Out of bounds read in DevTools * CVE-2022-1859: Use after free in Performance Manager * CVE-2022-1860: Use after free in UI Foundations * CVE-2022-1861: Use after free in Sharing * CVE-2022-1862: Inappropriate implementation in Extensions * CVE-2022-1863: Use after free in Tab Groups * CVE-2022-1864: Use after free in WebApp Installs * CVE-2022-1865: Use after free in Bookmarks * CVE-2022-1866: Use after free in Tablet Mode * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer * CVE-2022-1868: Inappropriate implementation in Extensions API * CVE-2022-1869: Type Confusion in V8 * CVE-2022-1870: Use after free in App Service * CVE-2022-1871: Insufficient policy enforcement in File System API * CVE-2022-1872: Insufficient policy enforcement in Extensions API * CVE-2022-1873: Insufficient policy enforcement in COOP * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing * CVE-2022-1875: Inappropriate implementation in PDF * CVE-2022-1876: Heap buffer overflow in DevTools
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: Chromium 102.0.5005.115 (boo#1200423) * CVE-2022-2007: Use after free in WebGPU * CVE-2022-2008: Out of bounds memory access in WebGL * CVE-2022-2010: Out of bounds read in compositing * CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61 (boo#1199893) * CVE-2022-1853: Use after free in Indexed DB * CVE-2022-1854: Use after free in ANGLE * CVE-2022-1855: Use after free in Messaging * CVE-2022-1856: Use after free in User Education * CVE-2022-1857: Insufficient policy enforcement in File System API * CVE-2022-1858: Out of bounds read in DevTools * CVE-2022-1859: Use after free in Performance Manager * CVE-2022-1860: Use after free in UI Foundations * CVE-2022-1861: Use after free in Sharing * CVE-2022-1862: Inappropriate implementation in Extensions * CVE-2022-1863: Use after free in Tab Groups * CVE-2022-1864: Use after free in WebApp Installs * CVE-2022-1865: Use after free in Bookmarks * CVE-2022-1866: Use after free in Tablet Mode * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer * CVE-2022-1868: Inappropriate implementation in Extensions API * CVE-2022-1869: Type Confusion in V8 * CVE-2022-1870: Use after free in App Service * CVE-2022-1871: Insufficient policy enforcement in File System API * CVE-2022-1872: Insufficient policy enforcement in Extensions API * CVE-2022-1873: Insufficient policy enforcement in COOP * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing * CVE-2022-1875: Inappropriate implementation in PDF * CVE-2022-1876: Heap buffer overflow in DevTools
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1199893
- https://bugzilla.suse.com/1200139
- https://bugzilla.suse.com/1200423
- https://lists.opensuse.org/archives/list/[email protected]/thread/RUXRSXC3TACZ74MCVMECNI7P2X6JM2NF/
- https://www.suse.com/security/cve/CVE-2022-1853
- https://www.suse.com/security/cve/CVE-2022-1854
- https://www.suse.com/security/cve/CVE-2022-1855
- https://www.suse.com/security/cve/CVE-2022-1856
- https://www.suse.com/security/cve/CVE-2022-1857
- https://www.suse.com/security/cve/CVE-2022-1858
- https://www.suse.com/security/cve/CVE-2022-1859
- https://www.suse.com/security/cve/CVE-2022-1860
- https://www.suse.com/security/cve/CVE-2022-1861
- https://www.suse.com/security/cve/CVE-2022-1862
- https://www.suse.com/security/cve/CVE-2022-1863
- https://www.suse.com/security/cve/CVE-2022-1864
- https://www.suse.com/security/cve/CVE-2022-1865
- https://www.suse.com/security/cve/CVE-2022-1866
- https://www.suse.com/security/cve/CVE-2022-1867
- https://www.suse.com/security/cve/CVE-2022-1868
- https://www.suse.com/security/cve/CVE-2022-1869
- https://www.suse.com/security/cve/CVE-2022-1870
- https://www.suse.com/security/cve/CVE-2022-1871
- https://www.suse.com/security/cve/CVE-2022-1872
- https://www.suse.com/security/cve/CVE-2022-1873
- https://www.suse.com/security/cve/CVE-2022-1874
- https://www.suse.com/security/cve/CVE-2022-1875
- https://www.suse.com/security/cve/CVE-2022-1876
- https://www.suse.com/security/cve/CVE-2022-2007
- https://www.suse.com/security/cve/CVE-2022-2008
- https://www.suse.com/security/cve/CVE-2022-2010
- https://www.suse.com/security/cve/CVE-2022-2011