CVE-2022-4262

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The chromium-browser-stable package has been updated to the new 108 branch with the 108.0.5359.94 release, fixing many bugs and 29 vulnerabilities, together with 107.0.5304.121 and 108.0.5359.71.

Some of the security fixes are -

CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy) on 2022-10-27 CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute on 2022-11-04 CVE-2022-4176: Out of bounds write in Lacros Graphics. Reported by @ginggilBesel on 2022-09-08 CVE-2022-4177: Use after free in Extensions. Reported by Chaoyuan Peng (@ret2happy) on 2022-10-28 CVE-2022-4178: Use after free in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2022-10-18 CVE-2022-4179: Use after free in Audio. Reported by Sergei Glazunov of Google Project Zero on 2022-10-24 CVE-2022-4180: Use after free in Mojo. Reported by Anonymous on 2022-10-26 CVE-2022-4181: Use after free in Forms. Reported by Aviv A. on 2022-11-09 CVE-2022-4182: Inappropriate implementation in Fenced Frames. Reported by Peter Nemeth on 2022-09-28 CVE-2022-4183: Insufficient policy enforcement in Popup Blocker. Reported by David Sievers on 2021-09-22 CVE-2022-4184: Insufficient policy enforcement in Autofill. Reported by Ahmed ElMasry on 2022-09-01 CVE-2022-4185: Inappropriate implementation in Navigation. Reported by James Lee (@Windowsrcer) on 2022-10-10 CVE-2022-4186: Insufficient validation of untrusted input in Downloads. Reported by Luan Herrera (@lbherrera_) on 2022-10-21 CVE-2022-4187: Insufficient policy enforcement in DevTools. Reported by Axel Chong on 2022-11-04 CVE-2022-4188: Insufficient validation of untrusted input in CORS. Reported by Philipp Beer (TU Wien) on 2022-06-30 CVE-2022-4189: Insufficient policy enforcement in DevTools. Reported by NDevTK on 2022-07-15 CVE-2022-4190: Insufficient data validation in Directory. Reported by Axel Chong on 2022-10-27 CVE-2022-4191: Use after free in Sign-In. Reported by Jaehun Jeong(@n3sk) of Theori on 2022-10-12 CVE-2022-4192: Use after free in Live Caption. Reported by Samet Bekmezci @sametbekmezci on 2022-07-14 CVE-2022-4193: Insufficient policy enforcement in File System API. Reported by Axel Chong on 2022-08-19 CVE-2022-4194: Use after free in Accessibility. Reported by Anonymous on 2022-10-03 CVE-2022-4195: Insufficient policy enforcement in Safe Browsing. Reported by Eric Lawrence of Microsoft on 2022-10-06 CVE-2022-4135: Heap buffer overflow in GPU. Reported by Clement Lecigne of Google's Threat Analysis Group on 2022-11-22 CVE-2022-4262: Type Confusion in V8. Reported by Clement Lecigne of Google's Threat Analysis Group on 2022-11-29

Google is aware that exploits for CVE-2022-4135 and CVE-2022-4262 exist in the wild.

This update for chromium fixes the following issues:

Chromium 108.0.5359.94 (boo#1205999)

• CVE-2022-4262: Type Confusion in V8

This update for opera fixes the following issues:

• Update to 94.0.4606.38

  • CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125
  • DNA-103624 Create JS API to open Search tabs feature
  • DNA-104004 Improve welcome pop-up
  • DNA-104053 Right mouse click open speed dial instead of context menu
  • DNA-104055 News article opens in active tab
  • DNA-104084 [Suggestion] Introduce a way to remove the Lucid Mode button
  • DNA-104089 No crashes reported in soccoro for Linux

• The update to chromium 108.0.5359.125 fixes following issues: CVE-2022-4436, CVE-2022-4437, CVE-2022-4438, CVE-2022-4439, CVE-2022-4440

• Update to 94.0.4606.26

  • CHR-9125 Update chromium on desktop-stable-108-4606 to 108.0.5359.99
  • DNA-99207 WebUI popup/dropdown could be empty due to lack of memory
  • DNA-102882 [SD][News][Continue on][Suggestion] Do not focus on opened page when opening in new tab
  • DNA-103076 Release installer consent flow globally
  • DNA-103137 Fix positioning in Web UI component
  • DNA-103240 Re-use logic from popup for consent not set in settings
  • DNA-103540 Implement Autostart for Opera Desktop (except Poland)
  • DNA-103636 Implement Lucid Mode for Videos
  • DNA-103637 Implement Lucid Mode button on top of videos
  • DNA-103638 Make Lucid Mode button on top of videos work
  • DNA-103641 Implement Lucid Mode for Images
  • DNA-103642 Updated design and animation for Lucid Mode button on top of videos
  • DNA-103650 Add Lucid Mode to Easy Setup
  • DNA-103701 Move User Styles loading/saving to a separate component
  • DNA-103718 Record 'consent_given' stat for every session
  • DNA-103724 Video detach button wont go away
  • DNA-103757 Add click animation for Lucid Mode button on top of videos
  • DNA-103765 Console error with lucid mode flag off
  • DNA-103770 Easy Setup switch doesn't get updated
  • DNA-103771 Click animation should only show when turning on Lucid Mode
  • DNA-103773 Unable to access lucid mode settings section directly
  • DNA-103784 Investigate video buttons 'escaping'
  • DNA-103800 Adapt Lucid Mode button to new design
  • DNA-103836 Translations for O94
  • DNA-103850 Label on detach button cut off
  • DNA-103924 Popup windows of type TYPE_APP_POPUP have incorrectly set minimum size
  • DNA-103931 Wrong sidebar detection.
  • DNA-103935 Change Lucid Mode Video (Sharpen videos) to default off
  • DNA-103949 Lucid Mode doesn't work in a private window
  • DNA-103959 Unable to scroll down on player home page
  • DNA-103962 [Settings] Remove 'Safety Check'
  • DNA-104011 Turn on Lucid Mode on all streams
  • DNA-104052 Hide Lucid Mode video button on Google Meet
  • DNA-103930 Promote O94 to stable

• The update to chromium 108.0.5359.99 fixes following issues:
  CVE-2022-4262

• Update to 93.0.4585.64

  • DNA-102836 Make 1st screen of Consent Popup a little taller to have more space under 'You can adjust your choices' label
  • DNA-102934 Turn on building testlist on GOTH instead of Buildbot
  • DNA-102969 On some pages search popup don't work
  • DNA-103053 Put consent flow settings in separate feature flag
  • DNA-103054 Update consent settings to new design
  • DNA-103062 Add opauto tests for consent flow settings
  • DNA-103099 Set testlist_from in testlist generating script
  • DNA-103240 Re-use logic from popup for consent not set in settings
  • DNA-103296 Force dark page break QR code in whats app
  • DNA-103298 Stat for recording adblock whitelist is not sent in every session
  • DNA-103522 Missing translations for IDS_CONSENT_FLOW_DATA_DESC_INTERESTS
  • DNA-103526 search popup doesn't recognize some currencies shortcut
  • DNA-103530 Replace icons in sidebar setup
  • DNA-103636 Implement Lucid Mode for Videos
  • DNA-103637 Implement Lucid Mode button on top of videos
  • DNA-103638 Make Lucid Mode button on top of videos work
  • DNA-103641 Implement Lucid Mode for Images -…

This update for opera fixes the following issues:

• Update to 99.0.4788.13

  • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
  • DNA-107317 __delayLoadHelper2 crash in crashreporter

• The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

• Update to 99.0.4788.9

  • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
  • DNA-107638 Translations for O99
  • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
  • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
  • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
  • DNA-107840 Promote O99 to stable

• Update to 98.0.4759.39

  • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
  • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
  • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
  • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
  • DNA-107435 Building archive_source_release target fails
  • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
  • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
  • DNA-107528 Handle real-time SD impression reporting
  • DNA-107546 Context menus broken with one workspace
  • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
  • DNA-107560 Optimize real-time SD impression reporting

These are all security issues fixed in the chromedriver-108.0.5359.94-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.12-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the nodejs-electron-21.3.4-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.