openSUSE-SU-2024:0212-2
Security update for chromium
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for chromium fixes the following issues: Chromium 126.0.6478.182 (boo#1227979): - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use after free in Audio - CVE-2024-6777: Use after free in Navigation - CVE-2024-6778: Race in DevTools - CVE-2024-6779: Out of bounds memory access in V8
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver, chromium | 126.0.6478.182-bp156.2.11.1 |
Show all 4 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.5 | chromium | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromedriver | 126.0.6478.182-bp156.2.11.1 |
| openSUSE Leap 15.6 | chromium | 126.0.6478.182-bp156.2.11.1 |
References
- https://bugzilla.suse.com/1227979
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RJOT7BGWYVLXOVLMKMOC32TKY7UOGTGI/
- https://www.suse.com/security/cve/CVE-2024-6772/
- https://www.suse.com/security/cve/CVE-2024-6773/
- https://www.suse.com/security/cve/CVE-2024-6774/
- https://www.suse.com/security/cve/CVE-2024-6775/
- https://www.suse.com/security/cve/CVE-2024-6776/
- https://www.suse.com/security/cve/CVE-2024-6777/