<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>41964</bug_id>
          
          <creation_ts>2022-02-15 22:34:39 +0300</creation_ts>
          <short_desc>Запрос на обновление до версии 98.0.4758.102 в связи c несколькими CVE</short_desc>
          <delta_ts>2022-02-16 19:18:39 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>chromium</component>
          <version>unstable</version>
          <rep_platform>x86_64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="saber716rus">79625490833</reporter>
          <assigned_to name="Andrey Cherepanov">cas</assigned_to>
          <cc>andy</cc>
    
    <cc>cas</cc>
    
    <cc>legion</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>207817</commentid>
    <comment_count>0</comment_count>
    <who name="saber716rus">79625490833</who>
    <bug_when>2022-02-15 22:34:39 +0300</bug_when>
    <thetext>[$15000][1290008] High CVE-2022-0603: Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy) on 2022-01-22

[$7000][1273397] High CVE-2022-0604: Heap buffer overflow in Tab Groups. Reported by Krace on 2021-11-24

[$7000][1286940] High CVE-2022-0605: Use after free in Webstore API. Reported by Thomas Orlita  on 2022-01-13

[$7000][1288020] High CVE-2022-0606: Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2022-01-17

[$TBD][1250655] High CVE-2022-0607: Use after free in GPU. Reported by 0x74960 on 2021-09-17

[$NA][1270333] High CVE-2022-0608: Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2021-11-16

[$NA][1296150] High CVE-2022-0609: Use after free in Animation. Reported by Adam Weidemann and Clément Lecigne of Google&apos;s Threat Analysis Group on 2022-02-10

[$TBD][1285449] Medium CVE-2022-0610: Inappropriate implementation in Gamepad API. Reported by Anonymous on 2022-01-08</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>207902</commentid>
    <comment_count>1</comment_count>
    <who name="Repository Robot">repository-robot</who>
    <bug_when>2022-02-16 18:23:22 +0300</bug_when>
    <thetext>chromium-98.0.4758.102-alt1 -&gt; sisyphus:

 Wed Feb 16 2022 Alexey Gladkov &lt;legion@altlinux.ru&gt; 98.0.4758.102-alt1
 - New version (98.0.4758.102) (ALT#41964).
 - Security fixes:
   - CVE-2022-0603: Use after free in File Manager.
   - CVE-2022-0604: Heap buffer overflow in Tab Groups.
   - CVE-2022-0605: Use after free in Webstore API.
   - CVE-2022-0606: Use after free in ANGLE.
   - CVE-2022-0607: Use after free in GPU.
   - CVE-2022-0608: Integer overflow in Mojo.
   - CVE-2022-0609: Use after free in Animation.
   - CVE-2022-0610: Inappropriate implementation in Gamepad API.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>207903</commentid>
    <comment_count>2</comment_count>
    <who name="Andrey Cherepanov">cas</who>
    <bug_when>2022-02-16 19:17:34 +0300</bug_when>
    <thetext>Для p10
295494 BUILDING #1 [locked] [test-only] sisyphus srpm=java-1.8.0-openjdk-1.8.0.322.b04-alt2_0.1.eajpp8.src.rpm</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>207904</commentid>
    <comment_count>3</comment_count>
    <who name="Andrey Cherepanov">cas</who>
    <bug_when>2022-02-16 19:18:39 +0300</bug_when>
    <thetext>Прошу прощения, 295263 AWAITING #2 p10 chromium.git=98.0.4758.102-alt0.p10.1</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>