Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0325-1

Опубликовано: 26 окт. 2023
Источник: suse-cvrf

Описание

Security update for chromium

This update for chromium fixes the following issues:

  • Chromium 118.0.5993.117 (boo#1216549)

    • CVE-2023-5472: Use after free in Profiles
    • Various fixes from internal audits, fuzzing and other initiatives

Список пакетов

SUSE Package Hub 15 SP4
chromedriver-118.0.5993.117-bp155.2.52.1
chromium-118.0.5993.117-bp155.2.52.1
SUSE Package Hub 15 SP5
chromedriver-118.0.5993.117-bp155.2.52.1
chromium-118.0.5993.117-bp155.2.52.1
openSUSE Leap 15.4
chromedriver-118.0.5993.117-bp155.2.52.1
chromium-118.0.5993.117-bp155.2.52.1
openSUSE Leap 15.5
chromedriver-118.0.5993.117-bp155.2.52.1
chromium-118.0.5993.117-bp155.2.52.1

Описание

Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Затронутые продукты
SUSE Package Hub 15 SP4:chromedriver-118.0.5993.117-bp155.2.52.1
SUSE Package Hub 15 SP4:chromium-118.0.5993.117-bp155.2.52.1
SUSE Package Hub 15 SP5:chromedriver-118.0.5993.117-bp155.2.52.1
SUSE Package Hub 15 SP5:chromium-118.0.5993.117-bp155.2.52.1

Ссылки