CVE-2022-3201

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.61 version, fixing many bugs and 20 vulnerabilities; it brings as well some improvements.

Some of the security fixes are:

High CVE-2022-3304: Use after free in CSS. High CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools. Reported by NDevTK on 2022-07-09 High CVE-2022-3305: Use after free in Survey. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Vulnerability Research Institute on 2022-04-24 High CVE-2022-3306: Use after free in Survey. Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Vulnerability Research Institute on 2022-04-27 High CVE-2022-3307: Use after free in Media. Reported by Anonymous Telecommunications Corp. Ltd. on 2022-05-08 Medium CVE-2022-3308: Insufficient policy enforcement in Developer Tools. Reported by Andrea Cappa (zi0Black) @ Shielder on 2022-07-08 Medium CVE-2022-3309: Use after free in Assistant. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab on 2022-07-29 Medium CVE-2022-3310: Insufficient policy enforcement in Custom Tabs. Reported by Ashwin Agrawal from Optus, Sydney on 2021-08-16 Medium CVE-2022-3311: Use after free in Import. Reported by Samet Bekmezci @sametbekmezci on 2022-03-04 Medium CVE-2022-3312: Insufficient validation of untrusted input in VPN. Reported by Andr.Ess on 2022-03-06 Medium CVE-2022-3313: Incorrect security UI in Full Screen. Reported by Irvan Kurniawan (sourc7) on 2022-04-20 Medium CVE-2022-3314: Use after free in Logging. Reported by Anonymous on 2022-05-24 Medium CVE-2022-3315: Type confusion in Blink. Reported by Anonymous on 2022-05-05 Low CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing. Reported by Sven Dysthe (@svn_dy) on 2022-06-07 Low CVE-2022-3317: Insufficient validation of untrusted input in Intents. Reported by Hafiizh on 2022-02-24 Low CVE-2022-3318: Use after free in ChromeOS Notifications. Reported by GraVity0 on 2022-04-22

This update for chromium fixes the following issues:

Chromium 105.0.5195.127 (boo#1203419):

• CVE-2022-3195: Out of bounds write in Storage
• CVE-2022-3196: Use after free in PDF
• CVE-2022-3197: Use after free in PDF
• CVE-2022-3198: Use after free in PDF
• CVE-2022-3199: Use after free in Frames
• CVE-2022-3200: Heap buffer overflow in Internals
• CVE-2022-3201: Insufficient validation of untrusted input in DevTools
• Various fixes from internal audits, fuzzing and other initiatives

This update for opera fixes the following issues:

Update to 91.0.4516.20

• CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127

• DNA-101312 Allow changing logged in user with BrowserAPI

• The update to chromium 105.0.5195.127 fixes following issues:
  CVE-2022-3196, CVE-2022-3197, CVE-2022-3198, CVE-2022-3199, CVE-2022-3200, CVE-2022-3201

Update to 91.0.4516.16

• CHR-9010 Update chromium on desktop-stable-105-4516 to 105.0.5195.102

• DNA-101447 Incorrect translation in Russian

• DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider()

• DNA-101495 Performance Stint 2022

• DNA-101551 Add version number info to browser API

• DNA-101662 Suppress 'Allowing special test code paths' warning on buildbot

• DNA-101753 News don't show after close browser

• DNA-101760 Translations for O91

• DNA-101799 Crash at opera::SuggestionList::SortAndCull

• DNA-101812 Sponsored site gets chosen as default entry when typing part of top-level domain

• DNA-101876 Promote 91 to stable

• Complete Opera 91.0 changelog at: https://blogs.opera.com/desktop/changelog-for-91/

Update to 90.0.4480.107

• DNA-100664 Shopping corner widget
• DNA-101495 Performance Stint 2022
• DNA-101753 News don’t show after close browser
• DNA-101799 Crash at opera::SuggestionList::SortAndCull

This update for opera fixes the following issues:

Update to 91.0.4516.20

• CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127

• DNA-101312 Allow changing logged in user with BrowserAPI

• The update to chromium 105.0.5195.127 fixes following issues:
  CVE-2022-3196, CVE-2022-3197, CVE-2022-3198, CVE-2022-3199, CVE-2022-3200, CVE-2022-3201

Update to 91.0.4516.16

• CHR-9010 Update chromium on desktop-stable-105-4516 to 105.0.5195.102

• DNA-101447 Incorrect translation in Russian

• DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider()

• DNA-101495 Performance Stint 2022

• DNA-101551 Add version number info to browser API

• DNA-101662 Suppress 'Allowing special test code paths' warning on buildbot

• DNA-101753 News don't show after close browser

• DNA-101760 Translations for O91

• DNA-101799 Crash at opera::SuggestionList::SortAndCull

• DNA-101812 Sponsored site gets chosen as default entry when typing part of top-level domain

• DNA-101876 Promote 91 to stable

• Complete Opera 91.0 changelog at: https://blogs.opera.com/desktop/changelog-for-91/

• Update to 90.0.4480.107

  • DNA-100664 Shopping corner widget
  • DNA-101495 Performance Stint 2022
  • DNA-101753 News don’t show after close browser
  • DNA-101799 Crash at opera::SuggestionList::SortAndCull

This update for chromium fixes the following issues:

Chromium 106.0.5249.91 (boo#1203808):

• CVE-2022-3370: Use after free in Custom Elements
• CVE-2022-3373: Out of bounds write in V8

includes changes from 106.0.5249.61:

• CVE-2022-3304: Use after free in CSS
• CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
• CVE-2022-3305: Use after free in Survey
• CVE-2022-3306: Use after free in Survey
• CVE-2022-3307: Use after free in Media
• CVE-2022-3308: Insufficient policy enforcement in Developer Tools
• CVE-2022-3309: Use after free in Assistant
• CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
• CVE-2022-3311: Use after free in Import
• CVE-2022-3312: Insufficient validation of untrusted input in VPN
• CVE-2022-3313: Incorrect security UI in Full Screen
• CVE-2022-3314: Use after free in Logging
• CVE-2022-3315: Type confusion in Blink
• CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
• CVE-2022-3317: Insufficient validation of untrusted input in Intents
• CVE-2022-3318: Use after free in ChromeOS Notifications

This update for chromium fixes the following issues:

Chromium 106.0.5249.91 (boo#1203808):

• CVE-2022-3370: Use after free in Custom Elements
• CVE-2022-3373: Out of bounds write in V8

Uncludes changes from 106.0.5249.61:

• CVE-2022-3304: Use after free in CSS
• CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
• CVE-2022-3305: Use after free in Survey
• CVE-2022-3306: Use after free in Survey
• CVE-2022-3307: Use after free in Media
• CVE-2022-3308: Insufficient policy enforcement in Developer Tools
• CVE-2022-3309: Use after free in Assistant
• CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
• CVE-2022-3311: Use after free in Import
• CVE-2022-3312: Insufficient validation of untrusted input in VPN
• CVE-2022-3313: Incorrect security UI in Full Screen
• CVE-2022-3314: Use after free in Logging
• CVE-2022-3315: Type confusion in Blink
• CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
• CVE-2022-3317: Insufficient validation of untrusted input in Intents
• CVE-2022-3318: Use after free in ChromeOS Notifications

This update for opera fixes the following issues:

• Update to 99.0.4788.13

  • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
  • DNA-107317 __delayLoadHelper2 crash in crashreporter

• The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

• Update to 99.0.4788.9

  • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
  • DNA-107638 Translations for O99
  • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
  • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
  • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
  • DNA-107840 Promote O99 to stable

• Update to 98.0.4759.39

  • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
  • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
  • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
  • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
  • DNA-107435 Building archive_source_release target fails
  • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
  • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
  • DNA-107528 Handle real-time SD impression reporting
  • DNA-107546 Context menus broken with one workspace
  • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
  • DNA-107560 Optimize real-time SD impression reporting

These are all security issues fixed in the chromedriver-105.0.5195.127-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.12-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.