1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-d66a01ad4f

[FEDORA-2023-d66a01ad4f] Fedora 38: chromium

Severity High
Affected Packages 1
CVEs 4
Info Packages References Vulnerabilities

update to 117.0.5938.132. Fixes following security issues: CVE-2023-5129
CVE-2023-5186

Package Affected Version
pkg:rpm/fedora/chromium?distro=fedora-38 < 117.0.5938.132.2.fc38
ID
FEDORA-2023-d66a01ad4f
Severity
high
Severity from
CVE-2023-5186
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d66a01ad4f
Published
2023-10-02T01:24:41
(11 months ago)
Modified
2023-10-02T01:24:41
(11 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2241195 Bug #2241195 - CVE-2023-5186 CVE-2023-5187 CVE-2023-5217 chromium: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241195
Bugzilla 2241119 Bug #2241119 - CVE-2023-5129 chromium: libwebp: out-of-bounds write with a specially crafted WebP lossless file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241119
Bugzilla 2241120 Bug #2241120 - CVE-2023-5129 chromium: libwebp: out-of-bounds write with a specially crafted WebP lossless file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241120
Bugzilla 2239523 Bug #2239523 - chromium chrashes with SIGILL on BTI capable systems (Apple M2) https://bugzilla.redhat.com/show_bug.cgi?id=2239523
Bugzilla 2241194 Bug #2241194 - CVE-2023-5186 CVE-2023-5187 CVE-2023-5217 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241194
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/chromium?distro=fedora-38 fedora chromium < 117.0.5938.132.2.fc38 fedora-38
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date