Lucene search

Https://packages.altlinux.org/en/sisyphus/security/FB1E7CD6E855BA1B20237B2CD8BE0A03

HistoryApr 11, 2023 - 12:00 a.m.

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.3.1.916-alt1

2023-04-1100:00:00

https://packages.altlinux.org/en/sisyphus/security/

packages.altlinux.org

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.013 Low

EPSS

Percentile

84.1%

JSON

April 11, 2023 Yandex Browser Team 23.3.1.916-alt1

- Browser updated to 23.3.1
  + Critical CVE-2023-0941: Use after free in Prompts.
  + High CVE-2023-0927: Use after free in Web Payments API.
  + High CVE-2023-0928: Use after free in SwiftShader.
  + High CVE-2023-0929: Use after free in Vulkan.
  + High CVE-2023-0930: Heap buffer overflow in Video.
  + High CVE-2023-0931: Use after free in Video.
  + High CVE-2023-0932: Use after free in WebRTC.
  + Medium CVE-2023-0933: Integer overflow in PDF.
  + High CVE-2023-0696: Type Confusion in V8.
  + High CVE-2023-0697: Inappropriate implementation in Full screen mode.
  + High CVE-2023-0698: Out of bounds read in WebRTC.
  + Medium CVE-2023-0699: Use after free in GPU.
  + Medium CVE-2023-0700: Inappropriate implementation in Download.
  + Medium CVE-2023-0701: Heap buffer overflow in WebUI.
  + Medium CVE-2023-0702: Type Confusion in Data Transfer.
  + Medium CVE-2023-0703: Type Confusion in DevTools.
  + Low CVE-2023-0704: Insufficient policy enforcement in DevTools.
  + Low CVE-2023-0705: Integer overflow in Core.
  + High CVE-2023-0471: Use after free in WebTransport.
  + High CVE-2023-0472: Use after free in WebRTC.
  + Medium CVE-2023-0473: Type Confusion in ServiceWorker API.
  + Medium CVE-2023-0474: Use after free in GuestView.
  + High CVE-2023-0128: Use after free in Overview Mode.
  + High CVE-2023-0129: Heap buffer overflow in Network Service.
  + Medium CVE-2023-0130: Inappropriate implementation in Fullscreen API.
  + Medium CVE-2023-0131: Inappropriate implementation in iframe Sandbox.
  + Medium CVE-2023-0132: Inappropriate implementation in Permission prompts.
  + Medium CVE-2023-0133: Inappropriate implementation in Permission prompts.
  + Medium CVE-2023-0134: Use after free in Cart.
  + Medium CVE-2023-0135: Use after free in Cart.
  + Medium CVE-2023-0136: Inappropriate implementation in Fullscreen API.
  + Medium CVE-2023-0137: Heap buffer overflow in Platform Apps.
  + Low CVE-2023-0138: Heap buffer overflow in libphonenumber.
  + Low CVE-2023-0139: Insufficient validation of untrusted input in Downloads.
  + Low CVE-2023-0140: Inappropriate implementation in File System API.
  + Low CVE-2023-0141: Insufficient policy enforcement in CORS.
- Set provides webclient (closes: [#43564](&lt;https://bugzilla.altlinux.org/43564&gt;))

OSVersionArchitecturePackageVersionFilename
ALT Linux10srcyandex-browser-stable-23.3.1.946-alt1.src.rpm< 23.3.1.916-alt1yandex-browser-stable-23.3.1.946-alt1.src.rpm
ALT Linux10x86_64yandex-browser-stable-23.3.1.946-alt1.x86_64.rpm< 23.3.1.916-alt1yandex-browser-stable-23.3.1.946-alt1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
ALT Linux	10	src	yandex-browser-stable-23.3.1.946-alt1.src.rpm	< 23.3.1.916-alt1	yandex-browser-stable-23.3.1.946-alt1.src.rpm
ALT Linux	10	x86_64	yandex-browser-stable-23.3.1.946-alt1.x86_64.rpm	< 23.3.1.916-alt1	yandex-browser-stable-23.3.1.946-alt1.x86_64.rpm