Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.1433
Stable Channel Update for Desktop
8 March 2023
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Google Chrome
Publisher: Google
Operating System: Windows
UNIX variants (UNIX, Linux, OSX)
Resolution: Patch/Upgrade
CVE Names: CVE-2023-1236 CVE-2023-1235 CVE-2023-1234
CVE-2023-1233 CVE-2023-1232 CVE-2023-1231
CVE-2023-1230 CVE-2023-1229 CVE-2023-1228
CVE-2023-1227 CVE-2023-1226 CVE-2023-1225
CVE-2023-1224 CVE-2023-1223 CVE-2023-1222
CVE-2023-1221 CVE-2023-1220 CVE-2023-1219
CVE-2023-1218 CVE-2023-1217 CVE-2023-1216
CVE-2023-1215 CVE-2023-1214 CVE-2023-1213
Original Bulletin:
https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html
Comment: CVSS (Max): None available when published
- --------------------------BEGIN INCLUDED TEXT--------------------
Stable Channel Update for Desktop
Tuesday, March 7, 2023
The Chrome team is delighted to announce the promotion of Chrome 111 to the stable
channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.
Chrome 111.0.5563.64 (Linux and Mac), 111.0.5563.64/.65( Windows) contains a number
of fixes and improvements -- a list of changes is available in the log.
Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts
delivered in 111.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are
updated with a fix. We will also retain restrictions if the bug exists in a third party library
that other projects similarly depend on, but haven’t yet fixed.
This update includes 40 security fixes. Below, we highlight fixes that were contributed by
external researchers. Please see the Chrome Security Page for more information.
[$15000][1411210] High CVE-2023-1213: Use after free in Swiftshader.
Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30
[$10000][1412487] High CVE-2023-1214: Type Confusion in V8.
Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03
[$7000][1417176] High CVE-2023-1215: Type Confusion in CSS.
Reported by Anonymous on 2023-02-17
[$4000][1417649] High CVE-2023-1216: Use after free in DevTools.
Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2023-02-21
[$3000][1412658] High CVE-2023-1217: Stack buffer overflow in Crash reporting.
Reported by sunburst of Ant Group Tianqiong Security Lab on 2023-02-03
[$3000][1413628] High CVE-2023-1218: Use after free in WebRTC.
Reported by Anonymous on 2023-02-07
[$TBD][1415328] High CVE-2023-1219: Heap buffer overflow in Metrics.
Reported by Sergei Glazunov of Google Project Zero on 2023-02-13
[$TBD][1417185] High CVE-2023-1220: Heap buffer overflow in UMA.
Reported by Sergei Glazunov of Google Project Zero on 2023-02-17
[$10000][1385343] Medium CVE-2023-1221: Insufficient policy enforcement in Extensions API.
Reported by Ahmed ElMasry on 2022-11-16
[$7000][1403515] Medium CVE-2023-1222: Heap buffer overflow in Web Audio API.
Reported by Cassidy Kim(@cassidy6564) on 2022-12-24
[$5000][1398579] Medium CVE-2023-1223: Insufficient policy enforcement in Autofill.
Reported by Ahmed ElMasry on 2022-12-07
[$5000][1403539] Medium CVE-2023-1224: Insufficient policy enforcement in Web Payments API.
Reported by Thomas Orlita on 2022-12-25
[$5000][1408799] Medium CVE-2023-1225: Insufficient policy enforcement in Navigation.
Reported by Roberto Ffrench-Davis @Lihaft on 2023-01-20
[$3000][1013080] Medium CVE-2023-1226: Insufficient policy enforcement in Web Payments API.
Reported by Anonymous on 2019-10-10
[$3000][1348791] Medium CVE-2023-1227: Use after free in Core.
Reported by @ginggilBesel on 2022-07-31
[$3000][1365100] Medium CVE-2023-1228: Insufficient policy enforcement in Intents.
Reported by Axel Chong on 2022-09-18
[$2000][1160485] Medium CVE-2023-1229: Inappropriate implementation in Permission prompts.
Reported by Thomas Orlita on 2020-12-20
[$2000][1404230] Medium CVE-2023-1230: Inappropriate implementation in WebApp Installs.
Reported by Axel Chong on 2022-12-30
[$TBD][1274887] Medium CVE-2023-1231: Inappropriate implementation in Autofill.
Reported by Yan Zhu, Brave on 2021-11-30
[$2000][1346924] Low CVE-2023-1232: Insufficient policy enforcement in Resource Timing.
Reported by Sohom Datta on 2022-07-24
[$1000][1045681] Low CVE-2023-1233: Insufficient policy enforcement in Resource Timing.
Reported by Soroush Karami on 2020-01-25
[$1000][1404621] Low CVE-2023-1234: Inappropriate implementation in Intents.
Reported by Axel Chong on 2023-01-03
[$1000][1404704] Low CVE-2023-1235: Type Confusion in DevTools.
Reported by raven at KunLun lab on 2023-01-03
[$TBD][1374518] Low CVE-2023-1236: Inappropriate implementation in Internals.
Reported by Alesandro Ortiz on 2022-10-14
We would also like to thank all security researchers that worked with us during the
development cycle to prevent security bugs from ever reaching the stable channel.
As usual, our ongoing internal security work was responsible for a wide range of fixes:
[1422099] Various fixes from internal audits, fuzzing and other initiatives
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out how here. If you find a new issue,
please let us know by filing a bug. The community help forum is also a great place to
reach out for help or learn about common issues.
Prudhvikumar Bommana
Google Chrome
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/
iQIVAwUBZAgS7ckNZI30y1K9AQgaRA/+OO3RId4SIkrfSbZklIyx52Hud17cSLI7
0pFbO6GlwAR7z6wG8VBCMnJpHtb2okf+YAuKWQVPpWrafM+8a+G6e6Zvn2CFEwyZ
Bt68vJdMhpBeO03SLvQn3JumHVk8qlxa8zJgQA6KWqEMN1RN9IwVJDLbpGCckJqR
1EtYuQRafxcQbUvin9uXEJkMdxyFrb6mjhTE6RA2v+9Hg0kRnNP3EU59meSWfBBt
6vnlKO9atxMtkzUZNZYLedDY6U3TACHN1LV4hZfe8AMbxKYdgdaOV/JkwKVV27vo
RCeXJWNvMhmyl99poQSWfDhOrGzxZRkVM1XfGzKq+E8jupzgWOFrrchwFFK0j5jk
mB29ZzyN3sz3w3IVN7T4RsWXsyhCb3QIYobwTx6zDMvuuuKWVGcG/DFaAqwKWCUP
ZgVkL2CHfdo/Nro8HMh8mzHW/0lYPOiSlig+agJ5A8AlOtyJyyul/3TFP38UGcYC
9kod0KgFrBUZ4uTSWnFGYRc0uOMDVdVO2OrUSIJHg/ntPzu0UhE4L+8X1Csrpvs4
CC86lA6cVFfAJgsBlTHjdnW0QICAOm412XvCdgkZx1LBZtPm55fSrGXp65qZnPG/
bOz+h+NCvqnbCWHKdzvEkk8uOVaO3k5a20zlAFiDB80q0cTSx2jLXl/dUKsQVLiH
uPEFIbOy8xQ=
=p6fs
-----END PGP SIGNATURE-----