Updated chromium-browser-stable packages fix security vulnerabilities

2024-05-2800:11:03

Gentoo Foundation

advisories.mageia.org

chromium

security vulnerabilities

cve-2024-5274

type confusion

google

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON

The chromium-browser-stable package has been updated to the 125.0.6422.112 release. It includes 1 security fix. * High CVE-2024-5274: Type Confusion in V8. Reported by Clément Lecigne of Google’s Threat Analysis Group and Brendon Tiszka of Chrome Security on 2024-05-20 Google is aware that an exploit for CVE-2024-5274 exists in the wild. Please, do note, that since some versions ago, only x86_64 is supported. i586 support for linux was stopped some years ago and the community is not able to provide patches anymore for the latest Chromium code.

OSVersionArchitecturePackageVersionFilename
Mageia9noarchchromium-browser-stable< 125.0.6422.112-1chromium-browser-stable-125.0.6422.112-1.mga9.tainted