{"id":"MGASA-2022-0376","summary":"Updated chromium-browser-stable packages fix security vulnerability","details":"The chromium-browser-stable package has been updated to the new 106 branch\nwith the 106.0.5249.119 version, fixing many bugs and 6 vulnerabilities.\nSome of the security fixes are:\n\nHigh CVE-2022-3445: Use after free in Skia. Reported by Nan Wang\n(@eternalsakura13) and Yong Liu of 360 Vulnerability Research Institute on\n2022-09-16\nHigh CVE-2022-3446: Heap buffer overflow in WebSQL. Reported by Kaijie Xu\n(@kaijieguigui) on 2022-09-26\nHigh CVE-2022-3447: Inappropriate implementation in Custom Tabs. Reported\nby Narendra Bhati of Suma Soft Pvt. Ltd. Pune (India) on 2022-09-22\nHigh CVE-2022-3448: Use after free in Permissions API. Reported by raven\nat KunLun lab on 2022-09-13\nHigh CVE-2022-3449: Use after free in Safe Browsing. Reported by asnine on\n2022-09-17\nHigh CVE-2022-3450: Use after free in Peer Connection. Reported by\nAnonymous on 2022-09-30\n","modified":"2026-04-16T04:43:57.764724559Z","published":"2022-10-18T23:14:56Z","upstream":["CVE-2022-3445","CVE-2022-3446","CVE-2022-3447","CVE-2022-3448","CVE-2022-3449","CVE-2022-3450"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2022-0376.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=30961"},{"type":"WEB","url":"https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_11.html"},{"type":"WEB","url":"https://blog.chromium.org/2022/09/chrome-106-beta-new-css-features.html"}],"affected":[{"package":{"name":"chromium-browser-stable","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/chromium-browser-stable?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"106.0.5249.119-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2022-0376.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}