OPENSUSE-SU-2022:10244-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP4 chromium

openSUSE:Leap 15.4 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2022-4436

related CVE-2022-4437

related CVE-2022-4438

related CVE-2022-4439

related CVE-2022-4440

upstream CVE-2022-4436

upstream CVE-2022-4437

upstream CVE-2022-4438

upstream CVE-2022-4439

upstream CVE-2022-4440

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2022:10244-1

This update for chromium fixes the following issues: Update to version 108.0.5359.124 (boo#1206403): - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use after free in Profiles

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1205433
https://lists.opensuse.org/archives/list/[email protected]/thread/I5J6OPVTWIV2IR6E5RHOT42UIBBBHIPD/
https://www.suse.com/security/cve/CVE-2022-4436
https://www.suse.com/security/cve/CVE-2022-4437
https://www.suse.com/security/cve/CVE-2022-4438
https://www.suse.com/security/cve/CVE-2022-4439
https://www.suse.com/security/cve/CVE-2022-4440