CVE-2022-2007

Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The chromium-browser-stable package has been updated to the 102.0.5005.115 version, fixing many bugs and 7 CVE. Some of them are listed below: Use after free in WebGPU. (CVE-2022-2007) Out of bounds memory access in WebGL. (CVE-2022-2008) Out of bounds read in compositing. (CVE-2022-2010) Use after free in ANGLE. (CVE-2022-2011)

This update for chromium fixes the following issues:

Chromium 102.0.5005.115 (boo#1200423)

• CVE-2022-2007: Use after free in WebGPU
• CVE-2022-2008: Out of bounds memory access in WebGL
• CVE-2022-2010: Out of bounds read in compositing
• CVE-2022-2011: Use after free in ANGLE

Chromium 102.0.5001.61 (boo#1199893)

• CVE-2022-1853: Use after free in Indexed DB
• CVE-2022-1854: Use after free in ANGLE
• CVE-2022-1855: Use after free in Messaging
• CVE-2022-1856: Use after free in User Education
• CVE-2022-1857: Insufficient policy enforcement in File System API
• CVE-2022-1858: Out of bounds read in DevTools
• CVE-2022-1859: Use after free in Performance Manager
• CVE-2022-1860: Use after free in UI Foundations
• CVE-2022-1861: Use after free in Sharing
• CVE-2022-1862: Inappropriate implementation in Extensions
• CVE-2022-1863: Use after free in Tab Groups
• CVE-2022-1864: Use after free in WebApp Installs
• CVE-2022-1865: Use after free in Bookmarks
• CVE-2022-1866: Use after free in Tablet Mode
• CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
• CVE-2022-1868: Inappropriate implementation in Extensions API
• CVE-2022-1869: Type Confusion in V8
• CVE-2022-1870: Use after free in App Service
• CVE-2022-1871: Insufficient policy enforcement in File System API
• CVE-2022-1872: Insufficient policy enforcement in Extensions API
• CVE-2022-1873: Insufficient policy enforcement in COOP
• CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
• CVE-2022-1875: Inappropriate implementation in PDF
• CVE-2022-1876: Heap buffer overflow in DevTools

This update for chromium fixes the following issues:

• Chromium 102.0.5005.115 (boo#1200423)
  • CVE-2022-2007: Use after free in WebGPU
  • CVE-2022-2008: Out of bounds memory access in WebGL
  • CVE-2022-2010: Out of bounds read in compositing
  • CVE-2022-2011: Use after free in ANGLE

This update for opera fixes the following issues:

opera was updated to 88.0.4412.74:

• DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches

Update to 88.0.4412.53

• DNA-99108 [Lin] Options on video pop out not possible to change
• DNA-99832 On automatic video popout, close button should not stop video
• DNA-99833 Allow turning on and off of each 'BABE' section from gear icon
• DNA-99852 Default browser in Mac installer
• DNA-99993 Crashes in AudioFileReaderTest, FFmpegAACBitstreamConverterTest
• DNA-100045 iFrame Exception not unblocked with Acceptable Ads
• DNA-100291 Update snapcraft uploading/releasing in scripts to use craft store

Changes in 88.0.4412.40

• CHR-8905 Update chromium on desktop-stable-102-4412 to 102.0.5005.115

• DNA-99713 Sizing issues with video conferencing controls in PiP window

• DNA-99831 Add 'back to tab' button like on video pop-out

• The update to chromium 102.0.5005.115 fixes following issues:
  CVE-2022-2007, CVE-2022-2008, CVE-2022-2010, CVE-2022-2011

Changes in 88.0.4412.27

• DNA-99725 Crash at opera::ModalDialogViews::Show()

• DNA-99752 Do not allow to uncheck all lists for adBlock

• DNA-99918 Enable #scrollable-tab-strip on desktop-stable-102-4412

• DNA-99969 Promote O88 to stable

• Complete Opera 88.0 changelog at: https://blogs.opera.com/desktop/changelog-for-88/

Update to 87.0.4390.45

• DNA-99478 Top Sites don’t always has big icon

• DNA-99702 Enable Acceptable Ads for stable stream

• DNA-99725 Crash at opera::ModalDialogViews::Show()

• DNA-99752 Do not allow to uncheck all lists for adBlock

• Update to 87.0.4390.36

  • CHR-8883 Update chromium on desktop-stable-101-4390 to 101.0.4951.67
  • DNA-99190 Investigate windows installer signature errors on win7
  • DNA-99502 Sidebar – API to open panels
  • DNA-99593 Report sad tab displayed counts per kind
  • DNA-99628 Personalized Speed Dial context menu issue fix

These are all security issues fixed in the chromedriver-102.0.5005.115-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.