OPENSUSE-SU-2023:0237-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP4 chromium

SUSE:Package Hub 15 SP5 chromium

openSUSE:Leap 15.4 chromium

openSUSE:Leap 15.5 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2023-4427

related CVE-2023-4428

related CVE-2023-4429

related CVE-2023-4430

related CVE-2023-4431

upstream CVE-2023-4427

upstream CVE-2023-4428

upstream CVE-2023-4429

upstream CVE-2023-4430

upstream CVE-2023-4431

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2023:0237-1

This update for chromium fixes the following issues: Chromium 116.0.5845.110 (boo#1214487): * CVE-2023-4427: Out of bounds memory access in V8 * CVE-2023-4428: Out of bounds memory access in CSS * CVE-2023-4429: Use after free in Loader * CVE-2023-4430: Use after free in Vulkan * CVE-2023-4431: Out of bounds memory access in Fonts

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1214487
https://lists.opensuse.org/archives/list/[email protected]/thread/H37YYMY3746JCGEKWXZITPFMBMSHFECF/
https://www.suse.com/security/cve/CVE-2023-4427
https://www.suse.com/security/cve/CVE-2023-4428
https://www.suse.com/security/cve/CVE-2023-4429
https://www.suse.com/security/cve/CVE-2023-4430
https://www.suse.com/security/cve/CVE-2023-4431