[Bug 1208029] New: VUL-0: chromium: multiple security issues fixed in 110.0.5481.77
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Bug ID: 1208029 Summary: VUL-0: chromium: multiple security issues fixed in 110.0.5481.77 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: gmbr3@opensuse.org Reporter: gabriele.sonnu@suse.com QA Contact: qa-bugs@suse.de CC: security-team@suse.de Found By: Security Response Team Blocker: --- https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desk... Fixed in Chromium 110.0.5481.77: * CVE-2023-0696: Type Confusion in V8 * CVE-2023-0697: Inappropriate implementation in Full screen mode * CVE-2023-0698: Out of bounds read in WebRTC * CVE-2023-0699: Use after free in GPU * CVE-2023-0700: Inappropriate implementation in Download * CVE-2023-0701: Heap buffer overflow in WebUI * CVE-2023-0702: Type Confusion in Data Transfer * CVE-2023-0703: Type Confusion in DevTools * CVE-2023-0704: Insufficient policy enforcement in DevTools * CVE-2023-0705: Integer overflow in Core * Various fixes from internal audits, fuzzing and other initiatives -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger@gmx.de -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Maintenance Automation <maint-coord+maintenance-robot@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/356451/ -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 Callum Farmer <gmbr3@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1208029 https://bugzilla.suse.com/show_bug.cgi?id=1208029#c3 --- Comment #3 from Swamp Workflow Management <swamp@suse.de> --- openSUSE-SU-2023:0045-1: An update that fixes 10 vulnerabilities is now available. Category: security (important) Bug References: 1208029 CVE References: CVE-2023-0696,CVE-2023-0697,CVE-2023-0698,CVE-2023-0699,CVE-2023-0700,CVE-2023-0701,CVE-2023-0702,CVE-2023-0703,CVE-2023-0704,CVE-2023-0705 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): chromium-110.0.5481.77-bp154.2.67.1 -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com