{"id":"MGASA-2024-0205","summary":"Updated chromium-browser-stable packages fix security vulnerabilities","details":"The chromium-browser-stable package has been updated to the\n125.0.6422.141 release. It includes 11 security fixes.\nSome of them are:\n* High CVE-2024-5493: Heap buffer overflow in WebRTC. Reported by\nCassidy Kim(@cassidy6564) on 2024-05-11\n* High CVE-2024-5494: Use after free in Dawn. Reported by wgslfuzz on\n2024-05-01\n* High CVE-2024-5495: Use after free in Dawn. Reported by wgslfuzz on\n2024-05-01\n* High CVE-2024-5496: Use after free in Media Session. Reported by\nCassidy Kim(@cassidy6564) on 2024-05-06\n* High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs.\nReported by zh1x1an1221 of Ant Group Tianqiong Security Lab on\n2024-05-07\n* High CVE-2024-5498: Use after free in Presentation API. Reported by\nanymous on 2024-05-09\n* High CVE-2024-5499: Out of bounds write in Streams API. Reported by\nanonymous on 2024-05-11\nPlease, do note, only x86_64 is supported since some versions ago.\ni586 support for linux was stopped some years ago and the community is\nnot able to provide patches anymore for the latest Chromium code.\n","modified":"2026-04-16T00:11:20.807724079Z","published":"2024-06-03T18:30:48Z","upstream":["CVE-2024-5493","CVE-2024-5494","CVE-2024-5495","CVE-2024-5496","CVE-2024-5497","CVE-2024-5498","CVE-2024-5499"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2024-0205.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=33261"},{"type":"WEB","url":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html"}],"affected":[{"package":{"name":"chromium-browser-stable","ecosystem":"Mageia:9","purl":"pkg:rpm/mageia/chromium-browser-stable?arch=source&distro=mageia-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"125.0.6422.141-1.mga9.tainted"}]}],"ecosystem_specific":{"section":"tainted"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2024-0205.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}