Test ID:	1.3.6.1.4.1.25623.1.1.10.2022.0211
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2022-0211)
Summary:	The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2022-0211 advisory.
Description:	Summary: The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2022-0211 advisory. Vulnerability Insight: The chromium-browser-stable package has been updated to the 102.0.5005.61 version, fixing many bugs and 32 CVE. Some of them are listed below: CVE-2022-1853: Use after free in Indexed DB. CVE-2022-1854: Use after free in ANGLE. CVE-2022-1855: Use after free in Messaging. CVE-2022-1856: Use after free in User Education. CVE-2022-1857: Insufficient policy enforcement in File System API. CVE-2022-1858: Out of bounds read in DevTools. CVE-2022-1859: Use after free in Performance Manager. CVE-2022-1860: Use after free in UI Foundations. CVE-2022-1861: Use after free in Sharing. CVE-2022-1862: Inappropriate implementation in Extensions. CVE-2022-1863: Use after free in Tab Groups. CVE-2022-1864: Use after free in WebApp Installs. CVE-2022-1865: Use after free in Bookmarks. CVE-2022-1866: Use after free in Tablet Mode. CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer. CVE-2022-1868: Inappropriate implementation in Extensions API. CVE-2022-1869: Type Confusion in V8. CVE-2022-1870: Use after free in App Service. CVE-2022-1871: Insufficient policy enforcement in File System API. CVE-2022-1872: Insufficient policy enforcement in Extensions API. CVE-2022-1873: Insufficient policy enforcement in COOP. CVE-2022-1874: Insufficient policy enforcement in Safe Browsing. CVE-2022-1875: Inappropriate implementation in PDF. CVE-2022-1876: Heap buffer overflow in DevTools. Various fixes from internal audits, fuzzing and other initiatives. Affected Software/OS: 'chromium-browser-stable' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1853 https://security.gentoo.org/glsa/202208-25 https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html https://crbug.com/1324864 Common Vulnerability Exposure (CVE) ID: CVE-2022-1854 https://crbug.com/1320024 Common Vulnerability Exposure (CVE) ID: CVE-2022-1855 https://crbug.com/1228661 Common Vulnerability Exposure (CVE) ID: CVE-2022-1856 https://crbug.com/1323239 Common Vulnerability Exposure (CVE) ID: CVE-2022-1857 https://crbug.com/1227995 Common Vulnerability Exposure (CVE) ID: CVE-2022-1858 https://crbug.com/1314310 Common Vulnerability Exposure (CVE) ID: CVE-2022-1859 https://crbug.com/1322744 Common Vulnerability Exposure (CVE) ID: CVE-2022-1860 https://crbug.com/1297209 Common Vulnerability Exposure (CVE) ID: CVE-2022-1861 https://crbug.com/1316846 Common Vulnerability Exposure (CVE) ID: CVE-2022-1862 https://crbug.com/1236325 Common Vulnerability Exposure (CVE) ID: CVE-2022-1863 https://crbug.com/1292870 Common Vulnerability Exposure (CVE) ID: CVE-2022-1864 https://crbug.com/1320624 Common Vulnerability Exposure (CVE) ID: CVE-2022-1865 https://crbug.com/1289192 Common Vulnerability Exposure (CVE) ID: CVE-2022-1866 https://crbug.com/1292264 Common Vulnerability Exposure (CVE) ID: CVE-2022-1867 https://crbug.com/1315563 Common Vulnerability Exposure (CVE) ID: CVE-2022-1868 https://crbug.com/1301203 Common Vulnerability Exposure (CVE) ID: CVE-2022-1869 https://crbug.com/1309467 Common Vulnerability Exposure (CVE) ID: CVE-2022-1870 https://crbug.com/1323236 Common Vulnerability Exposure (CVE) ID: CVE-2022-1871 https://crbug.com/1308199 Common Vulnerability Exposure (CVE) ID: CVE-2022-1872 https://crbug.com/1310461 Common Vulnerability Exposure (CVE) ID: CVE-2022-1873 https://crbug.com/1305394 Common Vulnerability Exposure (CVE) ID: CVE-2022-1874 https://crbug.com/1251588 Common Vulnerability Exposure (CVE) ID: CVE-2022-1875 https://crbug.com/1306443 Common Vulnerability Exposure (CVE) ID: CVE-2022-1876 https://crbug.com/1313600
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.