CVE-2021-30632

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

This update for chromium fixes the following issues:

Chromium 93.0.4577.63 (boo#1190096):

• CVE-2021-30606: Use after free in Blink
• CVE-2021-30607: Use after free in Permissions
• CVE-2021-30608: Use after free in Web Share
• CVE-2021-30609: Use after free in Sign-In
• CVE-2021-30610: Use after free in Extensions API
• CVE-2021-30611: Use after free in WebRTC
• CVE-2021-30612: Use after free in WebRTC
• CVE-2021-30613: Use after free in Base internals
• CVE-2021-30614: Heap buffer overflow in TabStrip
• CVE-2021-30615: Cross-origin data leak in Navigation
• CVE-2021-30616: Use after free in Media
• CVE-2021-30617: Policy bypass in Blink
• CVE-2021-30618: Inappropriate implementation in DevTools
• CVE-2021-30619: UI Spoofing in Autofill
• CVE-2021-30620: Insufficient policy enforcement in Blink
• CVE-2021-30621: UI Spoofing in Autofill
• CVE-2021-30622: Use after free in WebApp Installs
• CVE-2021-30623: Use after free in Bookmarks
• CVE-2021-30624: Use after free in Autofill

Chromium 93.0.4577.82 (boo#1190476):

• CVE-2021-30625: Use after free in Selection API
• CVE-2021-30626: Out of bounds memory access in ANGLE
• CVE-2021-30627: Type Confusion in Blink layout
• CVE-2021-30628: Stack buffer overflow in ANGLE
• CVE-2021-30629: Use after free in Permissions
• CVE-2021-30630: Inappropriate implementation in Blink
• CVE-2021-30631: Type Confusion in Blink layout
• CVE-2021-30632: Out of bounds write in V8
• CVE-2021-30633: Use after free in Indexed DB API

This update for chromium fixes the following issues:

Chromium 93.0.4577.63 (boo#1190096):

• CVE-2021-30606: Use after free in Blink
• CVE-2021-30607: Use after free in Permissions
• CVE-2021-30608: Use after free in Web Share
• CVE-2021-30609: Use after free in Sign-In
• CVE-2021-30610: Use after free in Extensions API
• CVE-2021-30611: Use after free in WebRTC
• CVE-2021-30612: Use after free in WebRTC
• CVE-2021-30613: Use after free in Base internals
• CVE-2021-30614: Heap buffer overflow in TabStrip
• CVE-2021-30615: Cross-origin data leak in Navigation
• CVE-2021-30616: Use after free in Media
• CVE-2021-30617: Policy bypass in Blink
• CVE-2021-30618: Inappropriate implementation in DevTools
• CVE-2021-30619: UI Spoofing in Autofill
• CVE-2021-30620: Insufficient policy enforcement in Blink
• CVE-2021-30621: UI Spoofing in Autofill
• CVE-2021-30622: Use after free in WebApp Installs
• CVE-2021-30623: Use after free in Bookmarks
• CVE-2021-30624: Use after free in Autofill

Chromium 93.0.4577.82 (boo#1190476):

• CVE-2021-30625: Use after free in Selection API
• CVE-2021-30626: Out of bounds memory access in ANGLE
• CVE-2021-30627: Type Confusion in Blink layout
• CVE-2021-30628: Stack buffer overflow in ANGLE
• CVE-2021-30629: Use after free in Permissions
• CVE-2021-30630: Inappropriate implementation in Blink
• CVE-2021-30631: Type Confusion in Blink layout
• CVE-2021-30632: Out of bounds write in V8
• CVE-2021-30633: Use after free in Indexed DB API

This update for opera fixes the following issues:

Opera was updated to version 79.0.4143.50

• CHR-8571 Update chromium on desktop-stable-93-4143 to 93.0.4577.82
• DNA-94104 ContinueShoppingOnEbayBrowserTest.ShouldDisplayOffers TilesStartingWithMostActiveOnes fails
• DNA-94894 [Rich Hint] Agent API permissions
• DNA-94989 Wrong color and appearance of subpages in the settings
• DNA-95241 “Switch to tab” button is visible only on hover
• DNA-95286 Add unit tests to pinboard sync related logic in browser
• DNA-95372 [Mac retina screen] Snapshot doesnt capture cropped area
• DNA-95526 Some webstore extensions are not verified properly
• The update to chromium 93.0.4577.82 fixes following issues: CVE-2021-30625, CVE-2021-30626, CVE-2021-30627, CVE-2021-30628, CVE-2021-30629, CVE-2021-30630, CVE-2021-30631, CVE-2021-30632, CVE-2021-30633

This update for nodejs-electron fixes the following issues:

• Fix webpack-4 with OpenSSL 3.0

Update to version 16.0.9

• https://github.com/electron/electron/releases/tag/v16.0.9

Update to version 16.0.8

• https://github.com/electron/electron/releases/tag/v16.0.8

• Add devel package with node headers (e.g. for node-gyp)

• Update to version 16.0.7

  • https://github.com/electron/electron/releases/tag/v16.0.7

• Update to version 15.3.3

  • https://github.com/electron/electron/releases/tag/v15.3.3

• Update to version 13.6.3 https://github.com/electron/electron/releases/tag/v13.6.3

• Update to version 13.6.2 https://github.com/electron/electron/releases/tag/v13.6.2

• Fix for CVE-2021-37998

• Fix for CVE-2021-38001

• Fix for CVE-2021-38002

• Fix for CVE-2021-38003

• Do not build with H264

• Update to version 13.6.1 https://github.com/electron/electron/releases/tag/v13.6.1

• Fix for CVE-2021-37981

• Fix for CVE-2021-37984

• Fix for CVE-2021-37987

• Fix for CVE-2021-37989

• Fix for CVE-2021-37992

• Fix for CVE-2021-37996

• Update to version 13.5.1 https://github.com/electron/electron/releases/tag/v13.5.1

• Update to version 13.5.0 https://github.com/electron/electron/releases/tag/v13.5.0

• Fix for CVE-2021-30627

• Fix for CVE-2021-30631

• Fix for CVE-2021-30632

• Fix for CVE-2021-30625

• Fix for CVE-2021-30626

• Fix for CVE-2021-30628

• Fix for CVE-2021-30630

• Fix for CVE-2021-30633

• Version 13.4.0

• Update to version 13.1.8

  • https://github.com/electron/electron/releases/tag/v13.1.8

• Update to version 13.1.7

  • https://github.com/electron/electron/releases/tag/v13.1.7

• Update to version 13.1.6

  • https://github.com/electron/electron/releases/tag/v13.1.6
  • https://github.com/electron/electron/releases/tag/v13.1.5

• Update to version 13.1.4

  • https://github.com/electron/electron/releases/tag/v13.1.4
  • https://github.com/electron/electron/releases/tag/v13.1.3

• Build with vaapi support

• Install missing vk_swiftshader_icd.json

• Update to version 13.1.2

  • https://github.com/electron/electron/releases/tag/v13.1.2

This update for opera fixes the following issues:

Update to 85.0.4341.28

• CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84

• DNA-98092 Crash at views::MenuItemView::GetMenuController()

• DNA-98278 Translations for O85

• DNA-98320 [Mac] Unable to delete recent search entries

• DNA-98614 Show recent searches for non-BABE users

• DNA-98615 Allow removal of recent searches

• DNA-98616 Add recent searches to ‘old’ BABE

• DNA-98617 Make it possible to disable ad-blocker per-country

• DNA-98651 Remove Instagram and Facebook Messenger in Russia

• DNA-98653 Add flag #recent-searches

• DNA-98696 smoketest PageInfoHistoryDataSourceTest.FormatTimestampString failing

• DNA-98703 Port Chromium issue 1309225 to Opera Stable

• The update to chromium 99.0.4844.84 fixes following issues:
  CVE-2022-1096

• Changes in 85.0.4341.18

  • CHR-8789 Update chromium on desktop-stable-99-4341 to 99.0.4844.51
  • DNA-98059 [Linux] Crash at opera::FreedomSettingsImpl::IsBypassForDotlessDomainsEnabled
  • DNA-98349 [Linux] Crash at bluez::BluezDBusManager::Get()
  • DNA-98126 System crash dialog shown on macOS <= 10.15
  • DNA-98331 [Snap] Meme generator cropping / resizing broken
  • DNA-98394 Audio tab indicator set to 'muted' on videoconferencing sites
  • DNA-98481 Report errors in opauto_collector

• The update to chromium 99.0.4844.51 fixes following issues: CVE-2022-0789, CVE-2022-0790, CVE-2022-0791, CVE-2022-0792, CVE-2022-0793, CVE-2022-0794, CVE-2022-0795, CVE-2022-0796, CVE-2022-0797, CVE-2022-0798, CVE-2022-0799, CVE-2022-0800, CVE-2022-0801, CVE-2022-0802, CVE-2022-0803, CVE-2022-0804, CVE-2022-0805, CVE-2022-0806, CVE-2022-0807, CVE-2022-0808, CVE-2022-0809

• Changes in 85.0.4341.13

  • DNA-94119 Upgrade curl to 7.81.0
  • DNA-97849 [Mac monterey] System shortcut interfere with Opera’s ToggleSearchInOpenTabs shortcut
  • DNA-98204 Automatic popout happens when video is paused
  • DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears
  • DNA-98321 Add thinlto-cache warnings to suppression list
  • DNA-98395 Promote O85 to stable

• Complete Opera 85.0 changelog at: https://blogs.opera.com/desktop/changelog-for-85/

• Update to 84.0.4316.42

  • DNA-94119 Upgrade curl to 7.81.0
  • DNA-98092 Crash at views::MenuItemView::GetMenuController()
  • DNA-98204 Automatic popout happens when video is paused
  • DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears

• Update to 84.0.4316.31

  • CHR-8772 Update chromium on desktop-stable-98-4316 to 98.0.4758.109
  • DNA-97573 [Win][Lin]”Close tab” button is not displayed on tabs playing media when many tabs are open
  • DNA-97729 cancelling the process uploading custom Wallpaper crashes the browser
  • DNA-97871 Google meet tab’s icons don’t fit on pinned tab
  • DNA-97872 Tab is being unpinned when video conferencing button is clicked
  • DNA-98039 Dark theme top sites have black background
  • DNA-98117 Clicking current tab information should hide tooltip

• Update to 84.0.4316.21

  • CHR-8762 Update chromium on desktop-stable-98-4316 to 98.0.4758.102
  • DNA-97333 ‘Add a site’ label on start page tile barely visible
  • DNA-97691 Opera 84 translations
  • DNA-97767 Wrong string in FR
  • DNA-97855 Crash at ScopedProfileKeepAlive::~ScopedProfileKeepAlive()
  • DNA-97982 Enable #snap-upstream-implementation on all streams

• The update to chromium 98.0.4758.102 fixes following issues: CVE-2022-0603, CVE-2022-0604, CVE-2022-0605, CVE-2022-0606, CVE-2022-0607, CVE-2022-0608, CVE-2022-0609, CVE-2022-0610

• Update to 84.0.4316.14

  • CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82
  • DNA-97177 Battery saver – the icon looks bad for DPI!=100%
  • DNA-97614 automatic video pop-out for most popular websites broadcasting Winter Olympic Games…

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the nodejs-electron-13.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.