CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

This update for chromium fixes the following issues:

Chromium 105.0.5195.127 (boo#1203419):

• CVE-2022-3195: Out of bounds write in Storage
• CVE-2022-3196: Use after free in PDF
• CVE-2022-3197: Use after free in PDF
• CVE-2022-3198: Use after free in PDF
• CVE-2022-3199: Use after free in Frames
• CVE-2022-3200: Heap buffer overflow in Internals
• CVE-2022-3201: Insufficient validation of untrusted input in DevTools
• Various fixes from internal audits, fuzzing and other initiatives

This update for opera fixes the following issues:

Update to 91.0.4516.20

• CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127

• DNA-101312 Allow changing logged in user with BrowserAPI

• The update to chromium 105.0.5195.127 fixes following issues:
  CVE-2022-3196, CVE-2022-3197, CVE-2022-3198, CVE-2022-3199, CVE-2022-3200, CVE-2022-3201

Update to 91.0.4516.16

• CHR-9010 Update chromium on desktop-stable-105-4516 to 105.0.5195.102

• DNA-101447 Incorrect translation in Russian

• DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider()

• DNA-101495 Performance Stint 2022

• DNA-101551 Add version number info to browser API

• DNA-101662 Suppress 'Allowing special test code paths' warning on buildbot

• DNA-101753 News don't show after close browser

• DNA-101760 Translations for O91

• DNA-101799 Crash at opera::SuggestionList::SortAndCull

• DNA-101812 Sponsored site gets chosen as default entry when typing part of top-level domain

• DNA-101876 Promote 91 to stable

• Complete Opera 91.0 changelog at: https://blogs.opera.com/desktop/changelog-for-91/

Update to 90.0.4480.107

• DNA-100664 Shopping corner widget
• DNA-101495 Performance Stint 2022
• DNA-101753 News don’t show after close browser
• DNA-101799 Crash at opera::SuggestionList::SortAndCull

This update for opera fixes the following issues:

Update to 91.0.4516.20

• CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127

• DNA-101312 Allow changing logged in user with BrowserAPI

• The update to chromium 105.0.5195.127 fixes following issues:
  CVE-2022-3196, CVE-2022-3197, CVE-2022-3198, CVE-2022-3199, CVE-2022-3200, CVE-2022-3201

Update to 91.0.4516.16

• CHR-9010 Update chromium on desktop-stable-105-4516 to 105.0.5195.102

• DNA-101447 Incorrect translation in Russian

• DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider()

• DNA-101495 Performance Stint 2022

• DNA-101551 Add version number info to browser API

• DNA-101662 Suppress 'Allowing special test code paths' warning on buildbot

• DNA-101753 News don't show after close browser

• DNA-101760 Translations for O91

• DNA-101799 Crash at opera::SuggestionList::SortAndCull

• DNA-101812 Sponsored site gets chosen as default entry when typing part of top-level domain

• DNA-101876 Promote 91 to stable

• Complete Opera 91.0 changelog at: https://blogs.opera.com/desktop/changelog-for-91/

• Update to 90.0.4480.107

  • DNA-100664 Shopping corner widget
  • DNA-101495 Performance Stint 2022
  • DNA-101753 News don’t show after close browser
  • DNA-101799 Crash at opera::SuggestionList::SortAndCull

This update for opera fixes the following issues:

• Update to 99.0.4788.13

  • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
  • DNA-107317 __delayLoadHelper2 crash in crashreporter

• The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

• Update to 99.0.4788.9

  • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
  • DNA-107638 Translations for O99
  • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
  • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
  • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
  • DNA-107840 Promote O99 to stable

• Update to 98.0.4759.39

  • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
  • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
  • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
  • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
  • DNA-107435 Building archive_source_release target fails
  • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
  • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
  • DNA-107528 Handle real-time SD impression reporting
  • DNA-107546 Context menus broken with one workspace
  • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
  • DNA-107560 Optimize real-time SD impression reporting

These are all security issues fixed in the chromedriver-105.0.5195.127-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.12-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.