Security update for chromium
This update for chromium fixes the following issues: Chromium 106.0.5249.91 (boo#1203808): * CVE-2022-3370: Use after free in Custom Elements * CVE-2022-3373: Out of bounds write in V8 includes changes from 106.0.5249.61: * CVE-2022-3304: Use after free in CSS * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools * CVE-2022-3305: Use after free in Survey * CVE-2022-3306: Use after free in Survey * CVE-2022-3307: Use after free in Media * CVE-2022-3308: Insufficient policy enforcement in Developer Tools * CVE-2022-3309: Use after free in Assistant * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs * CVE-2022-3311: Use after free in Import * CVE-2022-3312: Insufficient validation of untrusted input in VPN * CVE-2022-3313: Incorrect security UI in Full Screen * CVE-2022-3314: Use after free in Logging * CVE-2022-3315: Type confusion in Blink * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing * CVE-2022-3317: Insufficient validation of untrusted input in Intents * CVE-2022-3318: Use after free in ChromeOS Notifications
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: Chromium 106.0.5249.91 (boo#1203808): * CVE-2022-3370: Use after free in Custom Elements * CVE-2022-3373: Out of bounds write in V8 includes changes from 106.0.5249.61: * CVE-2022-3304: Use after free in CSS * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools * CVE-2022-3305: Use after free in Survey * CVE-2022-3306: Use after free in Survey * CVE-2022-3307: Use after free in Media * CVE-2022-3308: Insufficient policy enforcement in Developer Tools * CVE-2022-3309: Use after free in Assistant * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs * CVE-2022-3311: Use after free in Import * CVE-2022-3312: Insufficient validation of untrusted input in VPN * CVE-2022-3313: Incorrect security UI in Full Screen * CVE-2022-3314: Use after free in Logging * CVE-2022-3315: Type confusion in Blink * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing * CVE-2022-3317: Insufficient validation of untrusted input in Intents * CVE-2022-3318: Use after free in ChromeOS Notifications
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1203808
- https://lists.opensuse.org/archives/list/[email protected]/thread/YZBW4AE4VW4MIHPWQLMJEIBGACVXWAFW/
- https://www.suse.com/security/cve/CVE-2022-3201
- https://www.suse.com/security/cve/CVE-2022-3304
- https://www.suse.com/security/cve/CVE-2022-3305
- https://www.suse.com/security/cve/CVE-2022-3306
- https://www.suse.com/security/cve/CVE-2022-3307
- https://www.suse.com/security/cve/CVE-2022-3308
- https://www.suse.com/security/cve/CVE-2022-3309
- https://www.suse.com/security/cve/CVE-2022-3310
- https://www.suse.com/security/cve/CVE-2022-3311
- https://www.suse.com/security/cve/CVE-2022-3312
- https://www.suse.com/security/cve/CVE-2022-3313
- https://www.suse.com/security/cve/CVE-2022-3314
- https://www.suse.com/security/cve/CVE-2022-3315
- https://www.suse.com/security/cve/CVE-2022-3316
- https://www.suse.com/security/cve/CVE-2022-3317
- https://www.suse.com/security/cve/CVE-2022-3318
- https://www.suse.com/security/cve/CVE-2022-3370
- https://www.suse.com/security/cve/CVE-2022-3373