ELBA-2024-20309

ELBA-2024-20309 - chromium Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2024-04-16

Description

[123.0.6312.105-1]
- update to 123.0.6312.105
* High CVE-2024-3156: Inappropriate implementation in V8
* High CVE-2024-3158: Use after free in Bookmarks
* High CVE-2024-3159: Out of bounds memory access in V8

[123.0.6312.86-2]
- update to 123.0.6312.86
* Critical CVE-2024-2883: Use after free in ANGLE
* High CVE-2024-2885: Use after free in Daw
* High CVE-2024-2886: Use after free in WebCodecs
* High CVE-2024-2887: Type Confusion in WebAssembly

[123.0.6312.58-2]
- fixed bz#2269768 - enable build ppc64le package for F40
- fixed bz#2270321 - VAAPI flags in chromium.conf are out of date
- fixed bz#2271183 - disable screen ai service

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	chromium-123.0.6312.105-1.el7.src.rpm	cff3e2108c7648c7e4824908eeec9322	-	ol7_x86_64_developer_EPEL
	chromedriver-123.0.6312.105-1.el7.x86_64.rpm	f6528c2dc193ae67109f8a02d3923be4	-	ol7_x86_64_developer_EPEL
	chromium-123.0.6312.105-1.el7.x86_64.rpm	b807cab4010bdfb5ebf98848b5c9830d	-	ol7_x86_64_developer_EPEL
	chromium-common-123.0.6312.105-1.el7.x86_64.rpm	574d268f43752c867c9a7a31c05c87ec	-	ol7_x86_64_developer_EPEL
	chromium-headless-123.0.6312.105-1.el7.x86_64.rpm	5d83397a750990f925ae19943aac9305	-	ol7_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team