Linux · Security advisory · December 4, 2022

DSA-5295-1: chromium security update

DSA-5295-1, released December 4, 2022, fixes 1 CVE in chromium (version 108.0.5359.94-1~deb11u1). One of them is being exploited (CVE-2022-4262); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
1
None rated Critical
Exploited
1
CVE-2022-4262
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2351
97th percentile

Fixed package versions

ProductReleaseFixed in
chromiumDebian 11.6 (bullseye)108.0.5359.94-1~deb11u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2022-4262 Chromium: CVE-2022-4262 Type Confusion in V8 8.8 0.2351 KEVExploited
Showing 1 to 1 of 1 1