chromium -- multiple security fixes

2024-02-0600:00:00

vuxml.freebsd.org

chromium

security fixes

mojo

skia

heap buffer overflow

use after free

cve-2024-1284

cve-2024-1283

chrome releases

unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

36.3%

JSON

Chrome Releases reports:

This update includes 3 security fixes:

[41494539] High CVE-2024-1284: Use after free in Mojo. Reported by Anonymous on 2024-01-25
[41494860] High CVE-2024-1283: Heap buffer overflow in Skia. Reported by Jorge Buzeti (@r3tr074) on 2024-01-25

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 121.0.6167.160UNKNOWN
FreeBSDanynoarchungoogled-chromium< 121.0.6167.160UNKNOWN
FreeBSDanynoarchqt5-webengine< 5.15.16.p5_5UNKNOWN
FreeBSDanynoarchqt6-webengine< 6.6.1_5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	chromium	< 121.0.6167.160	UNKNOWN
FreeBSD	any	noarch	ungoogled-chromium	< 121.0.6167.160	UNKNOWN
FreeBSD	any	noarch	qt5-webengine	< 5.15.16.p5_5	UNKNOWN
FreeBSD	any	noarch	qt6-webengine	< 6.6.1_5	UNKNOWN