openSUSE-SU-2026:22023-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22023-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22023-1
Upstream
CVE (11)
  • CVE-2026-103621
  • CVE-2026-103622
  • CVE-2026-103623
  • CVE-2026-103624
  • CVE-2026-103625
  • CVE-2026-103626
  • CVE-2026-103627
  • CVE-2026-103628
  • CVE-2026-103629
  • CVE-2026-103630
  • CVE-2026-103631
Related
CVE (11)
  • CVE-2026-103621
  • CVE-2026-103622
  • CVE-2026-103623
  • CVE-2026-103624
  • CVE-2026-103625
  • CVE-2026-103626
  • CVE-2026-103627
  • CVE-2026-103628
  • CVE-2026-103629
  • CVE-2026-103630
  • CVE-2026-103631
Published
2026-10-06T06:37:05Z
Modified
2026-10-07T17:23:11Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 154.0.8037.97 (boo#1284015)
    • CVE-2026-103628: Out of bounds write in WebGL
    • CVE-2026-103626: Incorrect authorization in FileSystem
    • CVE-2026-103621: Integer overflow in Compositing
    • CVE-2026-103630: Use after free in FedCM
    • CVE-2026-103625: Type confusion in V8
    • CVE-2026-103624: Use after free in Contextual Tasks
    • CVE-2026-103629: Integer overflow in Skia
    • CVE-2026-103622: Use after free in SVG
    • CVE-2026-103623: Use after free in MediaStream
    • CVE-2026-103631: Buffer overflow in WebRTC
    • CVE-2026-103627: Information leak in SVG
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
154.0.8037.97-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "154.0.8037.97-bp160.1.1",
            "chromium":  "154.0.8037.97-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22023-1.json"