Security update for chromium
This update for chromium fixes the following issues: - Chromium 117.0.5938.132 (boo#1215776): * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) * CVE-2023-5186: Use after free in Passwords * CVE-2023-5187: Use after free in Extensions - Chromium 117.0.5938.92: * stability improvements
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: - Chromium 117.0.5938.132 (boo#1215776): * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) * CVE-2023-5186: Use after free in Passwords * CVE-2023-5187: Use after free in Extensions - Chromium 117.0.5938.92: * stability improvements
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1215776
- https://bugzilla.suse.com/1215778
- https://lists.opensuse.org/archives/list/[email protected]/thread/XVWTK2X25FKSQAO2JO5SKRXBOHGOHPUO/
- https://www.suse.com/security/cve/CVE-2023-5186
- https://www.suse.com/security/cve/CVE-2023-5187
- https://www.suse.com/security/cve/CVE-2023-5217