CVE-2022-3446

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.119 version, fixing many bugs and 6 vulnerabilities. Some of the security fixes are:

High CVE-2022-3445: Use after free in Skia. Reported by Nan Wang (@eternalsakura13) and Yong Liu of 360 Vulnerability Research Institute on 2022-09-16 High CVE-2022-3446: Heap buffer overflow in WebSQL. Reported by Kaijie Xu (@kaijieguigui) on 2022-09-26 High CVE-2022-3447: Inappropriate implementation in Custom Tabs. Reported by Narendra Bhati of Suma Soft Pvt. Ltd. Pune (India) on 2022-09-22 High CVE-2022-3448: Use after free in Permissions API. Reported by raven at KunLun lab on 2022-09-13 High CVE-2022-3449: Use after free in Safe Browsing. Reported by asnine on 2022-09-17 High CVE-2022-3450: Use after free in Peer Connection. Reported by Anonymous on 2022-09-30

This update for chromium fixes the following issues:

Chromium 106.0.5249.119 (boo#1204223):

• CVE-2022-3445: Use after free in Skia
• CVE-2022-3446: Heap buffer overflow in WebSQL
• CVE-2022-3447: Inappropriate implementation in Custom Tabs
• CVE-2022-3448: Use after free in Permissions API
• CVE-2022-3449: Use after free in Safe Browsing
• CVE-2022-3450: Use after free in Peer Connection

This update for chromium fixes the following issues:

Chromium 106.0.5249.119 (boo#1204223):

• CVE-2022-3445: Use after free in Skia
• CVE-2022-3446: Heap buffer overflow in WebSQL
• CVE-2022-3447: Inappropriate implementation in Custom Tabs
• CVE-2022-3448: Use after free in Permissions API
• CVE-2022-3449: Use after free in Safe Browsing
• CVE-2022-3450: Use after free in Peer Connection

This update for opera fixes the following issues:

Update to 92.0.4561.21

• CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119
• DNA-102295 Missing GX.games section in settings
• DNA-102308 Presubmit errors
• DNA-102329 [Consent flow] clicking on 'Customize settings' doesn't resize the popup
• DNA-102340 Sidebar control panel doesn't hide
• DNA-102348 Replace old Dify url with a new one
• DNA-102430 Translations for O92
• DNA-102534 Allow staging RH Agent extension to use VPN Pro API
• DNA-102548 Rich hints extension crashes on Linux
• DNA-102551 Promote O92 to stable
• Complete Opera 92.0 changelog at: https://blogs.opera.com/desktop/changelog-for-92/
• The update to chromium 106.0.5249.119 fixes following issues:
  CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450

Update to 91.0.4516.77

• DNA-101988 Implement dark mode for consent flow popups
• DNA-102348 Replace old Dify url with a new one

Update to 91.0.4516.65

• DNA-101240 Save “remind in 3 days” setting
• DNA-101622 Add a way to check if browser is connected to webenv
• DNA-101838 Unfiltered dropdown disabled by default on stable
• DNA-101990 Boost sites into top sites
• DNA-101998 flag tiktok-panel doesn’t work
• DNA-102075 Crash at extensions::ExtensionApiFrameIdMap:: OnRenderFrameDeleted(content::RenderFrameHost*)

This update for opera fixes the following issues:

Update to 92.0.4561.21

• CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119
• DNA-102295 Missing GX.games section in settings
• DNA-102308 Presubmit errors
• DNA-102329 [Consent flow] clicking on 'Customize settings' doesn't resize the popup
• DNA-102340 Sidebar control panel doesn't hide
• DNA-102348 Replace old Dify url with a new one
• DNA-102430 Translations for O92
• DNA-102534 Allow staging RH Agent extension to use VPN Pro API
• DNA-102548 Rich hints extension crashes on Linux
• DNA-102551 Promote O92 to stable
• Complete Opera 92.0 changelog at: https://blogs.opera.com/desktop/changelog-for-92/
• The update to chromium 106.0.5249.119 fixes following issues:
  CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450

Update to 91.0.4516.77

• DNA-101988 Implement dark mode for consent flow popups
• DNA-102348 Replace old Dify url with a new one

Update to 91.0.4516.65

• DNA-101240 Save “remind in 3 days” setting
• DNA-101622 Add a way to check if browser is connected to webenv
• DNA-101838 Unfiltered dropdown disabled by default on stable
• DNA-101990 Boost sites into top sites
• DNA-101998 flag tiktok-panel doesn’t work
• DNA-102075 Crash at extensions::ExtensionApiFrameIdMap:: OnRenderFrameDeleted(content::RenderFrameHost*)

This update for opera fixes the following issues:

• Update to 99.0.4788.13

  • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
  • DNA-107317 __delayLoadHelper2 crash in crashreporter

• The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

• Update to 99.0.4788.9

  • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
  • DNA-107638 Translations for O99
  • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
  • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
  • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
  • DNA-107840 Promote O99 to stable

• Update to 98.0.4759.39

  • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
  • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
  • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
  • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
  • DNA-107435 Building archive_source_release target fails
  • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
  • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
  • DNA-107528 Handle real-time SD impression reporting
  • DNA-107546 Context menus broken with one workspace
  • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
  • DNA-107560 Optimize real-time SD impression reporting

These are all security issues fixed in the chromedriver-106.0.5249.119-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.12-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.