Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0237-1

Опубликовано: 28 авг. 2023
Источник: suse-cvrf

Описание

Security update for chromium

This update for chromium fixes the following issues:

Chromium 116.0.5845.110 (boo#1214487):

  • CVE-2023-4427: Out of bounds memory access in V8
  • CVE-2023-4428: Out of bounds memory access in CSS
  • CVE-2023-4429: Use after free in Loader
  • CVE-2023-4430: Use after free in Vulkan
  • CVE-2023-4431: Out of bounds memory access in Fonts

Список пакетов

SUSE Package Hub 15 SP4
chromedriver-116.0.5845.110-bp155.2.22.1
chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5
chromedriver-116.0.5845.110-bp155.2.22.1
chromium-116.0.5845.110-bp155.2.22.1
openSUSE Leap 15.4
chromedriver-116.0.5845.110-bp155.2.22.1
chromium-116.0.5845.110-bp155.2.22.1
openSUSE Leap 15.5
chromedriver-116.0.5845.110-bp155.2.22.1
chromium-116.0.5845.110-bp155.2.22.1

Ссылки

Описание

Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP4:chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromium-116.0.5845.110-bp155.2.22.1
Ссылки

Описание

Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP4:chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromium-116.0.5845.110-bp155.2.22.1
Ссылки

Описание

Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP4:chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromium-116.0.5845.110-bp155.2.22.1
Ссылки

Описание

Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP4:chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromium-116.0.5845.110-bp155.2.22.1
Ссылки

Описание

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP4:chromium-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromedriver-116.0.5845.110-bp155.2.22.1
SUSE Package Hub 15 SP5:chromium-116.0.5845.110-bp155.2.22.1
Ссылки