Bug 41964

Summary:	Запрос на обновление до версии 98.0.4758.102 в связи c несколькими CVE
Product:	Sisyphus	Reporter:	saber716rus <79625490833>
Component:	chromium	Assignee:	Andrey Cherepanov <cas>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	normal
Priority:	P5	CC:	andy, cas, legion
Version:	unstable
Hardware:	x86_64
OS:	Linux
URL:	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html

Description

saber716rus 2022-02-15 22:34:39 MSK

[$15000][1290008] High CVE-2022-0603: Use after free in File Manager. Reported by Chaoyuan Peng (@ret2happy) on 2022-01-22

[$7000][1273397] High CVE-2022-0604: Heap buffer overflow in Tab Groups. Reported by Krace on 2021-11-24

[$7000][1286940] High CVE-2022-0605: Use after free in Webstore API. Reported by Thomas Orlita  on 2022-01-13

[$7000][1288020] High CVE-2022-0606: Use after free in ANGLE. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2022-01-17

[$TBD][1250655] High CVE-2022-0607: Use after free in GPU. Reported by 0x74960 on 2021-09-17

[$NA][1270333] High CVE-2022-0608: Integer overflow in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2021-11-16

[$NA][1296150] High CVE-2022-0609: Use after free in Animation. Reported by Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group on 2022-02-10

[$TBD][1285449] Medium CVE-2022-0610: Inappropriate implementation in Gamepad API. Reported by Anonymous on 2022-01-08

Comment 1

Repository Robot 2022-02-16 18:23:22 MSK

chromium-98.0.4758.102-alt1 -> sisyphus:

 Wed Feb 16 2022 Alexey Gladkov <legion@altlinux.ru> 98.0.4758.102-alt1
 - New version (98.0.4758.102) (ALT#41964).
 - Security fixes:
   - CVE-2022-0603: Use after free in File Manager.
   - CVE-2022-0604: Heap buffer overflow in Tab Groups.
   - CVE-2022-0605: Use after free in Webstore API.
   - CVE-2022-0606: Use after free in ANGLE.
   - CVE-2022-0607: Use after free in GPU.
   - CVE-2022-0608: Integer overflow in Mojo.
   - CVE-2022-0609: Use after free in Animation.
   - CVE-2022-0610: Inappropriate implementation in Gamepad API.

Comment 2

Andrey Cherepanov 2022-02-16 19:17:34 MSK

Для p10
295494 BUILDING #1 [locked] [test-only] sisyphus srpm=java-1.8.0-openjdk-1.8.0.322.b04-alt2_0.1.eajpp8.src.rpm

Comment 3

Andrey Cherepanov 2022-02-16 19:18:39 MSK

Прошу прощения, 295263 AWAITING #2 p10 chromium.git=98.0.4758.102-alt0.p10.1