Search the atlas

OPENSUSE-SU-2023:0124-1 Not scored

Security update for chromium

This update for chromium fixes the following issues: - Chromium 114.0.5735.106 (boo#1212044): * CVE-2023-3079: Type Confusion in V8 - Chromium 114.0.5735.90 (boo#1211843): * CSS text-wrap: balance is available * Cookies partitioned by top level site (CHIPS) * New Popover API - Security fixes: * CVE-2023-2929: Out of bounds write in Swiftshader * CVE-2023-2930: Use after free in Extensions * CVE-2023-2931: Use after free in PDF * CVE-2023-2932: Use after free in PDF * CVE-2023-2933: Use after free in PDF * CVE-2023-2934: Out of bounds memory access in Mojo * CVE-2023-2935: Type Confusion in V8 * CVE-2023-2936: Type Confusion in V8 * CVE-2023-2937: Inappropriate implementation in Picture In Picture * CVE-2023-2938: Inappropriate implementation in Picture In Picture * CVE-2023-2939: Insufficient data validation in Installer * CVE-2023-2940: Inappropriate implementation in Downloads * CVE-2023-2941: Inappropriate implementation in Extensions API

Exploit probability Not scored

Published June 9, 2023

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP4 chromium

openSUSE:Leap 15.4 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2023-2929

related CVE-2023-2930

related CVE-2023-2931

related CVE-2023-2932

related CVE-2023-2933

related CVE-2023-2934

related CVE-2023-2935

related CVE-2023-2936

related CVE-2023-2937

related CVE-2023-2938

related CVE-2023-2939

related CVE-2023-2940

related CVE-2023-2941

related CVE-2023-3079

upstream CVE-2023-2929

upstream CVE-2023-2930

upstream CVE-2023-2931

upstream CVE-2023-2932

upstream CVE-2023-2933

upstream CVE-2023-2934

upstream CVE-2023-2935

upstream CVE-2023-2936

upstream CVE-2023-2937

upstream CVE-2023-2938

upstream CVE-2023-2939

upstream CVE-2023-2940

upstream CVE-2023-2941

upstream CVE-2023-3079

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2023:0124-1

This update for chromium fixes the following issues: - Chromium 114.0.5735.106 (boo#1212044): * CVE-2023-3079: Type Confusion in V8 - Chromium 114.0.5735.90 (boo#1211843): * CSS text-wrap: balance is available * Cookies partitioned by top level site (CHIPS) * New Popover API - Security fixes: * CVE-2023-2929: Out of bounds write in Swiftshader * CVE-2023-2930: Use after free in Extensions * CVE-2023-2931: Use after free in PDF * CVE-2023-2932: Use after free in PDF * CVE-2023-2933: Use after free in PDF * CVE-2023-2934: Out of bounds memory access in Mojo * CVE-2023-2935: Type Confusion in V8 * CVE-2023-2936: Type Confusion in V8 * CVE-2023-2937: Inappropriate implementation in Picture In Picture * CVE-2023-2938: Inappropriate implementation in Picture In Picture * CVE-2023-2939: Insufficient data validation in Installer * CVE-2023-2940: Inappropriate implementation in Downloads * CVE-2023-2941: Inappropriate implementation in Extensions API

View original source

05 / REFERENCES

Further evidence