CVE-2022-1125

Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.

Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.

Use after free in Portals. (CVE-2022-1125) Use after free in QR Code Generator. (CVE-2022-1127) Inappropriate implementation in Web Share API. (CVE-2022-1128) Inappropriate implementation in Full Screen Mode. (CVE-2022-1129) Insufficient validation of untrusted input in WebOTP. (CVE-2022-1130) Use after free in Cast UI. (CVE-2022-1131) Inappropriate implementation in Virtual Keyboard. (CVE-2022-1132) Use after free in WebRTC. (CVE-2022-1133) Type Confusion in V8. (CVE-2022-1134) Use after free in Shopping Cart. (CVE-2022-1135) Use after free in Tab Strip. (CVE-2022-1136) Inappropriate implementation in Extensions. (CVE-2022-1137) Inappropriate implementation in Web Cursor. (CVE-2022-1138) Inappropriate implementation in Background Fetch API. (CVE-2022-1139) Use after free in File Manager. (CVE-2022-1141) Heap buffer overflow in WebUI. (CVE-2022-1142) Heap buffer overflow in WebUI. (CVE-2022-1143) Use after free in WebUI. (CVE-2022-1144) Use after free in Extensions. (CVE-2022-1145) Inappropriate implementation in Resource Timing. (CVE-2022-1146)

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.10:

• Fix top level build with no widget

• Fix read-after-free on EGL extensions

• Update Chromium

• Add workaround for unstable gn on macOS in ci

• Pass archiver to gn build

• Fix navigation to non-local URLs

• Add support for universal builds for qtwebengine and qtpdf

• Enable Apple Silicon support

• Fix cross compilation x86_64->arm64 on mac

• Bump version to 5.15.10

• CustomDialogs: Make custom input fields readable in dark mode

• CookieBrowser: Make alternating rows readable in dark mode

• Update Chromium:

  • Bump V8_PATCH_LEVEL
  • Fix clang set-but-unused-variable warning
  • Fix mac toolchain python linker script call
  • Fix missing dependency for gpu sources
  • Fix python calls
  • Fix undefined symbol for universal link
  • Quick fix for regression in service workers by reverting backports
  • [Backport] CVE-2022-0797: Out of bounds memory access in Mojo
  • [Backport] CVE-2022-1125
  • [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor.
  • [Backport] CVE-2022-1305: Use after free in storage
  • [Backport] CVE-2022-1310: Use after free in regular expressions
  • [Backport] CVE-2022-1314: Type Confusion in V8
  • [Backport] CVE-2022-1493: Use after free in Dev Tools
  • [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  • [Backport] Security Bug 1296876
  • [Backport] Security bug 1269999
  • [Backport] Security bug 1280852
  • [Backport] Security bug 1292905
  • [Backport] Security bug 1304659
  • [Backport] Security bug 1306507

These are all security issues fixed in the chromedriver-100.0.4896.60-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.10-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.