File _patchinfo of Package patchinfo.18472
<patchinfo incident="18472">
<issue tracker="bnc" id="1226504">VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 126.0.6478.114</issue>
<issue tracker="bnc" id="1226170">Chromium - widevine not being loaded in arm64 Linux</issue>
<issue tracker="bnc" id="1226205">VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 126.0.6478.54</issue>
<issue tracker="bnc" id="1226933">VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 126.0.6478.126</issue>
<issue tracker="cve" id="2024-6290"/>
<issue tracker="cve" id="2024-5836"/>
<issue tracker="cve" id="2024-5830"/>
<issue tracker="cve" id="2024-5843"/>
<issue tracker="cve" id="2024-5842"/>
<issue tracker="cve" id="2024-6293"/>
<issue tracker="cve" id="2024-5840"/>
<issue tracker="cve" id="2024-5844"/>
<issue tracker="cve" id="2024-5838"/>
<issue tracker="cve" id="2024-5834"/>
<issue tracker="cve" id="2024-5839"/>
<issue tracker="cve" id="2024-5846"/>
<issue tracker="cve" id="2024-5831"/>
<issue tracker="cve" id="2024-5841"/>
<issue tracker="cve" id="2024-5833"/>
<issue tracker="cve" id="2024-5847"/>
<issue tracker="cve" id="2024-6102"/>
<issue tracker="cve" id="2024-6292"/>
<issue tracker="cve" id="2024-6100"/>
<issue tracker="cve" id="2024-5835"/>
<issue tracker="cve" id="2024-5832"/>
<issue tracker="cve" id="2024-6101"/>
<issue tracker="cve" id="2024-6291"/>
<issue tracker="cve" id="2024-5837"/>
<issue tracker="cve" id="2024-6103"/>
<issue tracker="cve" id="2024-5845"/>
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
* CVE-2024-6290: Use after free in Dawn
* CVE-2024-6291: Use after free in Swiftshader
* CVE-2024-6292: Use after free in Dawn
* CVE-2024-6293: Use after free in Dawn
* CVE-2024-6100: Type Confusion in V8
* CVE-2024-6101: Inappropriate implementation in WebAssembly
* CVE-2024-6102: Out of bounds memory access in Dawn
* CVE-2024-6103: Use after free in Dawn
* CVE-2024-5830: Type Confusion in V8
* CVE-2024-5831: Use after free in Dawn
* CVE-2024-5832: Use after free in Dawn
* CVE-2024-5833: Type Confusion in V8
* CVE-2024-5834: Inappropriate implementation in Dawn
* CVE-2024-5835: Heap buffer overflow in Tab Groups
* CVE-2024-5836: Inappropriate Implementation in DevTools
* CVE-2024-5837: Type Confusion in V8
* CVE-2024-5838: Type Confusion in V8
* CVE-2024-5839: Inappropriate Implementation in Memory Allocator
* CVE-2024-5840: Policy Bypass in CORS
* CVE-2024-5841: Use after free in V8
* CVE-2024-5842: Use after free in Browser UI
* CVE-2024-5843: Inappropriate implementation in Downloads
* CVE-2024-5844: Heap buffer overflow in Tab Strip
* CVE-2024-5845: Use after free in Audio
* CVE-2024-5846: Use after free in PDFium
* CVE-2024-5847: Use after free in PDFium
- Amend fix_building_widevinecdm_with_chromium.patch to allow
Widevine on ARM64 (boo#1226170)
</description>
</patchinfo>