ELBA-2024-23450

ELBA-2024-23450 - chromium Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2024-06-14

Description

[126.0.6478.55-1]
- update to 126.0.6478.55
* High CVE-2024-5830: Type Confusion in V8
* High CVE-2024-5831: Use after free in Dawn
* High CVE-2024-5832: Use after free in Dawn
* High CVE-2024-5833: Type Confusion in V8
* High CVE-2024-5834: Inappropriate implementation in Dawn
* High CVE-2024-5835: Heap buffer overflow in Tab Groups
* High CVE-2024-5836: Inappropriate Implementation in DevTools
* High CVE-2024-5837: Type Confusion in V8
* High CVE-2024-5838: Type Confusion in V8
* Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator
* Medium CVE-2024-5840: Policy Bypass in CORS
* Medium CVE-2024-5841: Use after free in V8
* Medium CVE-2024-5842: Use after free in Browser UI
* Medium CVE-2024-5843: Inappropriate implementation in Downloads
* Medium CVE-2024-5844: Heap buffer overflow in Tab Strip
* Medium CVE-2024-5845: Use after free in Audio
* Medium CVE-2024-5846: Use after free in PDFium
* Medium CVE-2024-5847: Use after free in PDFium

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	chromium-126.0.6478.55-1.el7.src.rpm	7bf8327ba31710df15a9a1f53b04499a54d9b7cd020559a924ce1f14507ec82f	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromedriver-126.0.6478.55-1.el7.x86_64.rpm	b98fdd1729ae0dd7bbce9da719a9e8b4eb1d5718012433de6ea699f7049cefb3	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-126.0.6478.55-1.el7.x86_64.rpm	ee3bac00019b8d84e6eb4222782505678edc533e9f3a9e73a9642d9c6983debc	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-common-126.0.6478.55-1.el7.x86_64.rpm	384744f6d2460ce7b6f49821a5e0b3454377711c569f4e3c875c4e04cc101baa	ELBA-2024-24036	ol7_x86_64_developer_EPEL
	chromium-headless-126.0.6478.55-1.el7.x86_64.rpm	ab98436964095196fe378313ac5e90ab08c99964e42eff3f8da848ca74b4586f	ELBA-2024-24036	ol7_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team