Bug 41964 - Запрос на обновление до версии 98.0.4758.102 в связи c несколькими CVE
Summary: Запрос на обновление до версии 98.0.4758.102 в связи c несколькими CVE
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: chromium (show other bugs)
Version: unstable
Hardware: x86_64 Linux
: P5 normal
Assignee: Alexey Gladkov
QA Contact: qa-sisyphus
URL: https://chromereleases.googleblog.com...
Keywords:
Depends on:
Blocks:
 
Reported: 2022-02-15 22:34 MSK by saber
Modified: 2022-02-16 19:18 MSK (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description saber 2022-02-15 22:34:39 MSK 
[$15000][1290008] High CVE-2022-0603: Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy) on 2022-01-22

[$7000][1273397] High CVE-2022-0604: Heap buffer overflow in Tab Groups. Reported by Krace on 2021-11-24

[$7000][1286940] High CVE-2022-0605: Use after free in Webstore API. Reported by Thomas Orlita  on 2022-01-13

[$7000][1288020] High CVE-2022-0606: Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2022-01-17

[$TBD][1250655] High CVE-2022-0607: Use after free in GPU. Reported by 0x74960 on 2021-09-17

[$NA][1270333] High CVE-2022-0608: Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2021-11-16

[$NA][1296150] High CVE-2022-0609: Use after free in Animation. Reported by Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group on 2022-02-10

[$TBD][1285449] Medium CVE-2022-0610: Inappropriate implementation in Gamepad API. Reported by Anonymous on 2022-01-08
Comment 1 Repository Robot 2022-02-16 18:23:22 MSK 
chromium-98.0.4758.102-alt1 -> sisyphus:

 Wed Feb 16 2022 Alexey Gladkov <legion@altlinux.ru> 98.0.4758.102-alt1
 - New version (98.0.4758.102) (ALT#41964).
 - Security fixes:
   - CVE-2022-0603: Use after free in File Manager.
   - CVE-2022-0604: Heap buffer overflow in Tab Groups.
   - CVE-2022-0605: Use after free in Webstore API.
   - CVE-2022-0606: Use after free in ANGLE.
   - CVE-2022-0607: Use after free in GPU.
   - CVE-2022-0608: Integer overflow in Mojo.
   - CVE-2022-0609: Use after free in Animation.
   - CVE-2022-0610: Inappropriate implementation in Gamepad API.
Comment 2 Andrey Cherepanov 2022-02-16 19:17:34 MSK 
Для p10
295494 BUILDING #1 [locked] [test-only] sisyphus srpm=java-1.8.0-openjdk-1.8.0.322.b04-alt2_0.1.eajpp8.src.rpm
Comment 3 Andrey Cherepanov 2022-02-16 19:18:39 MSK 
Прошу прощения, 295263 AWAITING #2 p10 chromium.git=98.0.4758.102-alt0.p10.1