openSUSE-SU-2024:0212-2
Security update for chromium
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for chromium fixes the following issues: Chromium 126.0.6478.182 (boo#1227979): - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use after free in Audio - CVE-2024-6777: Use after free in Navigation - CVE-2024-6778: Race in DevTools - CVE-2024-6779: Out of bounds memory access in V8
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
Alle 4 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.5 | chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromium | 126.0.6478.182-bp156.2.11.1 |
Referenzen
- https://bugzilla.suse.com/1227979
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RJOT7BGWYVLXOVLMKMOC32TKY7UOGTGI/
- https://www.suse.com/security/cve/CVE-2024-6772/
- https://www.suse.com/security/cve/CVE-2024-6773/
- https://www.suse.com/security/cve/CVE-2024-6774/
- https://www.suse.com/security/cve/CVE-2024-6775/
- https://www.suse.com/security/cve/CVE-2024-6776/
- https://www.suse.com/security/cve/CVE-2024-6777/