openSUSE-SU-2023:0277-1
Security update for chromium
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for chromium fixes the following issues: - Chromium 117.0.5938.132 (boo#1215776): * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) * CVE-2023-5186: Use after free in Passwords * CVE-2023-5187: Use after free in Extensions - Chromium 117.0.5938.92: * stability improvements
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | chromedriver, chromium | 117.0.5938.132-bp155.2.40.1 |
| openSUSE Leap 15.5 | chromedriver, chromium | 117.0.5938.132-bp155.2.40.1 |
2 kaynaktaki 4 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | chromedriver | 117.0.5938.132-bp155.2.40.1 |
| openSUSE Leap 15.4 | chromium | 117.0.5938.132-bp155.2.40.1 |
| openSUSE Leap 15.5 | chromedriver | 117.0.5938.132-bp155.2.40.1 |
| openSUSE Leap 15.5 | chromium | 117.0.5938.132-bp155.2.40.1 |
Referanslar
- https://bugzilla.suse.com/1215776
- https://bugzilla.suse.com/1215778
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XVWTK2X25FKSQAO2JO5SKRXBOHGOHPUO/
- https://www.suse.com/security/cve/CVE-2023-5186/
- https://www.suse.com/security/cve/CVE-2023-5187/
- https://www.suse.com/security/cve/CVE-2023-5217/
- https://www.suse.com/support/security/rating/