openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0159-1 Rating: important References: #1212755 Cross-References: CVE-2023-3420 CVE-2023-3421 CVE-2023-3422 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 114.0.5735.198 (boo#1212755): * CVE-2023-3420: Type Confusion in V8 * CVE-2023-3421: Use after free in Media * CVE-2023-3422: Use after free in Guest View - Install Qt5 library & prepare for Qt6 in 115 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-159=1 - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-159=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-114.0.5735.198-bp155.2.10.1 chromedriver-debuginfo-114.0.5735.198-bp155.2.10.1 chromium-114.0.5735.198-bp155.2.10.1 chromium-debuginfo-114.0.5735.198-bp155.2.10.1 - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-114.0.5735.198-bp154.2.96.1 chromium-114.0.5735.198-bp154.2.96.1 References: https://www.suse.com/security/cve/CVE-2023-3420.html https://www.suse.com/security/cve/CVE-2023-3421.html https://www.suse.com/security/cve/CVE-2023-3422.html https://bugzilla.suse.com/1212755