ELBA-2024-20309

ELBA-2024-20309 - chromium Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2024-04-16

Description

[123.0.6312.105-1]
- update to 123.0.6312.105
* High CVE-2024-3156: Inappropriate implementation in V8
* High CVE-2024-3158: Use after free in Bookmarks
* High CVE-2024-3159: Out of bounds memory access in V8

[123.0.6312.86-2]
- update to 123.0.6312.86
* Critical CVE-2024-2883: Use after free in ANGLE
* High CVE-2024-2885: Use after free in Daw
* High CVE-2024-2886: Use after free in WebCodecs
* High CVE-2024-2887: Type Confusion in WebAssembly

[123.0.6312.58-2]
- fixed bz#2269768 - enable build ppc64le package for F40
- fixed bz#2270321 - VAAPI flags in chromium.conf are out of date
- fixed bz#2271183 - disable screen ai service

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	chromium-123.0.6312.105-1.el7.src.rpm	802c395ef63d81682382eb03ea13ba42cf387b99c061575c47743f3644040204	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromedriver-123.0.6312.105-1.el7.x86_64.rpm	0b937bed468cd9319366f8c1e09b18fab4fcbd52ae8a855884fe0ce191afeb59	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-123.0.6312.105-1.el7.x86_64.rpm	a6bdcb259c3ff70cf4c33cbbc3f8aa7089a204b898765f7ca05702f8164d48a7	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-common-123.0.6312.105-1.el7.x86_64.rpm	527170de932cdabf80bda3c92a19b175b4cc26d956035e653bdb3a7bc1c0c0d0	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-headless-123.0.6312.105-1.el7.x86_64.rpm	7427c9af7c5c0f20cab40c40ecea0abfd659a9bf7d7c5ef6807fd6db7162cf71	ELBA-2024-24036	ol7_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team