OPENSUSE-SU-2022:10201-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP3 chromium

SUSE:Package Hub 15 SP4 chromium

openSUSE:Leap 15.3 chromium

openSUSE:Leap 15.4 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2022-3885

related CVE-2022-3886

related CVE-2022-3887

related CVE-2022-3888

related CVE-2022-3889

related CVE-2022-3890

upstream CVE-2022-3885

upstream CVE-2022-3886

upstream CVE-2022-3887

upstream CVE-2022-3888

upstream CVE-2022-3889

upstream CVE-2022-3890

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2022:10201-1

This update for chromium fixes the following issues: - Chromium 107.0.5304.110 (boo#1205221) * CVE-2022-3885: Use after free in V8 * CVE-2022-3886: Use after free in Speech Recognition * CVE-2022-3887: Use after free in Web Workers * CVE-2022-3888: Use after free in WebCodecs * CVE-2022-3889: Type Confusion in V8 * CVE-2022-3890: Heap buffer overflow in Crashpad

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1205221
https://lists.opensuse.org/archives/list/[email protected]/thread/6I5LZV23MCEBLZDJFZZRGXQBMWN5B4RO/
https://www.suse.com/security/cve/CVE-2022-3885
https://www.suse.com/security/cve/CVE-2022-3886
https://www.suse.com/security/cve/CVE-2022-3887
https://www.suse.com/security/cve/CVE-2022-3888
https://www.suse.com/security/cve/CVE-2022-3889
https://www.suse.com/security/cve/CVE-2022-3890