openSUSE-SU-2023:0277-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0277-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2023:0277-1
Related
Published
2023-09-29T07:34:25Z
Modified
2023-09-29T07:34:25Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

  • Chromium 117.0.5938.132 (boo#1215776):

    • CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778)
    • CVE-2023-5186: Use after free in Passwords
    • CVE-2023-5187: Use after free in Extensions

  • Chromium 117.0.5938.92:

    • stability improvements
References

Affected packages

SUSE:Package Hub 15 SP4 / chromium

Package

Name
chromium
Purl
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
117.0.5938.132-bp155.2.40.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "117.0.5938.132-bp155.2.40.1",
            "chromium": "117.0.5938.132-bp155.2.40.1"
        }
    ]
}

SUSE:Package Hub 15 SP5 / chromium

Package

Name
chromium
Purl
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
117.0.5938.132-bp155.2.40.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "117.0.5938.132-bp155.2.40.1",
            "chromium": "117.0.5938.132-bp155.2.40.1"
        }
    ]
}

openSUSE:Leap 15.4 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
117.0.5938.132-bp155.2.40.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "117.0.5938.132-bp155.2.40.1",
            "chromium": "117.0.5938.132-bp155.2.40.1"
        }
    ]
}

openSUSE:Leap 15.5 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
117.0.5938.132-bp155.2.40.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "117.0.5938.132-bp155.2.40.1",
            "chromium": "117.0.5938.132-bp155.2.40.1"
        }
    ]
}