CVE-2022-1493

Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.

Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.

Use after free in Vulkan. (CVE-2022-1477) Use after free in SwiftShader. (CVE-2022-1478) Use after free in ANGLE. (CVE-2022-1479) Use after free in Sharing. (CVE-2022-1481) Inappropriate implementation in WebGL. (CVE-2022-1482) Heap buffer overflow in WebGPU. (CVE-2022-1483) Heap buffer overflow in Web UI Settings. (CVE-2022-1484) Use after free in File System API. (CVE-2022-1485) Type Confusion in V8. (CVE-2022-1486) Use after free in Ozone. (CVE-2022-1487) Inappropriate implementation in Extensions API. (CVE-2022-1488) Out of bounds memory access in UI Shelf. (CVE-2022-1489) Use after free in Browser Switcher. (CVE-2022-1490) Use after free in Bookmarks. (CVE-2022-1491) Insufficient data validation in Blink Editing. (CVE-2022-1492) Use after free in Dev Tools. (CVE-2022-1493) Insufficient data validation in Trusted Types. (CVE-2022-1494) Incorrect security UI in Downloads. (CVE-2022-1495) Use after free in File Manager. (CVE-2022-1496) Inappropriate implementation in Input. (CVE-2022-1497) Inappropriate implementation in HTML Parser. (CVE-2022-1498) Inappropriate implementation in WebAuthentication. (CVE-2022-1499) Insufficient data validation in Dev Tools. (CVE-2022-1500) Inappropriate implementation in iframe. (CVE-2022-1501)

This update for chromium fixes the following issues:

Chromium 101.0.4951.54 (boo#1199118)

Chromium 101.0.4951.41 (boo#1198917):

• CVE-2022-1477: Use after free in Vulkan
• CVE-2022-1478: Use after free in SwiftShader
• CVE-2022-1479: Use after free in ANGLE
• CVE-2022-1480: Use after free in Device API
• CVE-2022-1481: Use after free in Sharing
• CVE-2022-1482: Inappropriate implementation in WebGL
• CVE-2022-1483: Heap buffer overflow in WebGPU
• CVE-2022-1484: Heap buffer overflow in Web UI Settings
• CVE-2022-1485: Use after free in File System API
• CVE-2022-1486: Type Confusion in V8
• CVE-2022-1487: Use after free in Ozone
• CVE-2022-1488: Inappropriate implementation in Extensions API
• CVE-2022-1489: Out of bounds memory access in UI Shelf
• CVE-2022-1490: Use after free in Browser Switcher
• CVE-2022-1491: Use after free in Bookmarks
• CVE-2022-1492: Insufficient data validation in Blink Editing
• CVE-2022-1493: Use after free in Dev Tools
• CVE-2022-1494: Insufficient data validation in Trusted Types
• CVE-2022-1495: Incorrect security UI in Downloads
• CVE-2022-1496: Use after free in File Manager
• CVE-2022-1497: Inappropriate implementation in Input
• CVE-2022-1498: Inappropriate implementation in HTML Parser
• CVE-2022-1499: Inappropriate implementation in WebAuthentication
• CVE-2022-1500: Insufficient data validation in Dev Tools
• CVE-2022-1501: Inappropriate implementation in iframe

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.10:

• Fix top level build with no widget

• Fix read-after-free on EGL extensions

• Update Chromium

• Add workaround for unstable gn on macOS in ci

• Pass archiver to gn build

• Fix navigation to non-local URLs

• Add support for universal builds for qtwebengine and qtpdf

• Enable Apple Silicon support

• Fix cross compilation x86_64->arm64 on mac

• Bump version to 5.15.10

• CustomDialogs: Make custom input fields readable in dark mode

• CookieBrowser: Make alternating rows readable in dark mode

• Update Chromium:

  • Bump V8_PATCH_LEVEL
  • Fix clang set-but-unused-variable warning
  • Fix mac toolchain python linker script call
  • Fix missing dependency for gpu sources
  • Fix python calls
  • Fix undefined symbol for universal link
  • Quick fix for regression in service workers by reverting backports
  • [Backport] CVE-2022-0797: Out of bounds memory access in Mojo
  • [Backport] CVE-2022-1125
  • [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor.
  • [Backport] CVE-2022-1305: Use after free in storage
  • [Backport] CVE-2022-1310: Use after free in regular expressions
  • [Backport] CVE-2022-1314: Type Confusion in V8
  • [Backport] CVE-2022-1493: Use after free in Dev Tools
  • [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  • [Backport] Security Bug 1296876
  • [Backport] Security bug 1269999
  • [Backport] Security bug 1280852
  • [Backport] Security bug 1292905
  • [Backport] Security bug 1304659
  • [Backport] Security bug 1306507

These are all security issues fixed in the chromedriver-101.0.4951.54-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.10-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.