File _patchinfo of Package patchinfo.17867

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.17867

<patchinfo incident="17867">
  <issue tracker="bnc" id="1209040">VUL-0: chromium: multiple security issues fixed in 111.0.5563.64</issue>
  <issue tracker="cve" id="2023-1234"/>
  <issue tracker="cve" id="2023-1223"/>
  <issue tracker="cve" id="2023-1227"/>
  <issue tracker="cve" id="2023-1233"/>
  <issue tracker="cve" id="2023-1228"/>
  <issue tracker="cve" id="2023-1222"/>
  <issue tracker="cve" id="2023-1236"/>
  <issue tracker="cve" id="2023-1230"/>
  <issue tracker="cve" id="2023-1235"/>
  <issue tracker="cve" id="2023-1226"/>
  <issue tracker="cve" id="2023-1225"/>
  <issue tracker="cve" id="2023-1217"/>
  <issue tracker="cve" id="2023-1220"/>
  <issue tracker="cve" id="2023-1218"/>
  <issue tracker="cve" id="2023-1231"/>
  <issue tracker="cve" id="2023-1224"/>
  <issue tracker="cve" id="2023-1221"/>
  <issue tracker="cve" id="2023-1216"/>
  <issue tracker="cve" id="2023-1213"/>
  <issue tracker="cve" id="2023-1229"/>
  <issue tracker="cve" id="2023-1215"/>
  <issue tracker="cve" id="2023-1219"/>
  <issue tracker="cve" id="2023-1232"/>
  <issue tracker="cve" id="2023-1214"/>
  <packager>AndreasStieger</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for chromium</summary>
  <description>This update for chromium fixes the following issues:

Chromium 111.0.5563.64

* New View Transitions API
* CSS Color Level 4
* New developer tools in style panel for color functionality
* CSS added trigonometric functions, additional root font units
  and extended the n-th child pseudo selector.
* previousslide and nextslide actions are now part of the Media
  Session API
* A number of security fixes (boo#1209040)
* CVE-2023-1213: Use after free in Swiftshader
* CVE-2023-1214: Type Confusion in V8
* CVE-2023-1215: Type Confusion in CSS
* CVE-2023-1216: Use after free in DevTools
* CVE-2023-1217: Stack buffer overflow in Crash reporting
* CVE-2023-1218: Use after free in WebRTC
* CVE-2023-1219: Heap buffer overflow in Metrics
* CVE-2023-1220: Heap buffer overflow in UMA
* CVE-2023-1221: Insufficient policy enforcement in Extensions API
* CVE-2023-1222: Heap buffer overflow in Web Audio API
* CVE-2023-1223: Insufficient policy enforcement in Autofill
* CVE-2023-1224: Insufficient policy enforcement in Web Payments API
* CVE-2023-1225: Insufficient policy enforcement in Navigation
* CVE-2023-1226: Insufficient policy enforcement in Web Payments API
* CVE-2023-1227: Use after free in Core
* CVE-2023-1228: Insufficient policy enforcement in Intents
* CVE-2023-1229: Inappropriate implementation in Permission prompts
* CVE-2023-1230: Inappropriate implementation in WebApp Installs
* CVE-2023-1231: Inappropriate implementation in Autofill
* CVE-2023-1232: Insufficient policy enforcement in Resource Timing
* CVE-2023-1233: Insufficient policy enforcement in Resource Timing
* CVE-2023-1234: Inappropriate implementation in Intents
* CVE-2023-1235: Type Confusion in DevTools
* CVE-2023-1236: Inappropriate implementation in Internals
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.17867

Places