{"id":"MGASA-2024-0161","summary":"Updated chromium-browser-stable packages fix security vulnerabilities","details":"The chromium-browser-stable package has been updated to the\n124.0.6367.128 release. It includes 2 security fixes.\nPlease, do note, only x86_64 is supported from now on.\ni586 support for linux was stopped some years ago and the community is\nnot able to provide patches anymore for the latest Chromium code.\nSome of the security fixes are:\n* High CVE-2024-4331: Use after free in Picture In Picture. Reported by\nZhenghang Xiao (@Kipreyyy) on 2024-04-16\n* High CVE-2024-4368: Use after free in Dawn. Reported by wgslfuzz on\n2024-04-09\n","modified":"2026-04-16T04:42:04.264768077Z","published":"2024-05-09T02:40:29Z","upstream":["CVE-2024-4331","CVE-2024-4368"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2024-0161.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=33151"},{"type":"WEB","url":"https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_30.html"}],"affected":[{"package":{"name":"chromium-browser-stable","ecosystem":"Mageia:9","purl":"pkg:rpm/mageia/chromium-browser-stable?arch=source&distro=mageia-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"124.0.6367.118-1.mga9.tainted"}]}],"ecosystem_specific":{"section":"tainted"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2024-0161.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}