crítica
openSUSE-SU-2024:0212-2
Security update for chromium
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for chromium fixes the following issues: Chromium 126.0.6478.182 (boo#1227979): - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use after free in Audio - CVE-2024-6777: Use after free in Navigation - CVE-2024-6778: Race in DevTools - CVE-2024-6779: Out of bounds memory access in V8
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
Mostrar las 4 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.5 | chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromium | 126.0.6478.182-bp156.2.11.1 |
Referencias
- https://bugzilla.suse.com/1227979
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RJOT7BGWYVLXOVLMKMOC32TKY7UOGTGI/
- https://www.suse.com/security/cve/CVE-2024-6772/
- https://www.suse.com/security/cve/CVE-2024-6773/
- https://www.suse.com/security/cve/CVE-2024-6774/
- https://www.suse.com/security/cve/CVE-2024-6775/
- https://www.suse.com/security/cve/CVE-2024-6776/
- https://www.suse.com/security/cve/CVE-2024-6777/