openSUSE-SU-2023:0045-1

Dashboard / Vulnerabilities / openSUSE-SU-2023:0045-1

openSUSE-SU-2023:0045-1

Summary: Security update for chromium

Details: This update for chromium fixes the following issues: Chromium 110.0.5481.77 (boo#1208029): * CVE-2023-0696: Type Confusion in V8 * CVE-2023-0697: Inappropriate implementation in Full screen mode * CVE-2023-0698: Out of bounds read in WebRTC * CVE-2023-0699: Use after free in GPU * CVE-2023-0700: Inappropriate implementation in Download * CVE-2023-0701: Heap buffer overflow in WebUI * CVE-2023-0702: Type Confusion in Data Transfer * CVE-2023-0703: Type Confusion in DevTools * CVE-2023-0704: Insufficient policy enforcement in DevTools * CVE-2023-0705: Integer overflow in Core * Various fixes from internal audits, fuzzing and other initiatives - build with bundled libavif

References: https://lists.opensuse.org/archives/list/[email protected]/thread/2ZUPRNYY3OQIIYHF4EDZBQMHP655Z7MA/, https://bugzilla.suse.com/1208029, https://www.suse.com/security/cve/CVE-2023-0696, https://www.suse.com/security/cve/CVE-2023-0697, https://www.suse.com/security/cve/CVE-2023-0698, https://www.suse.com/security/cve/CVE-2023-0699, https://www.suse.com/security/cve/CVE-2023-0700, https://www.suse.com/security/cve/CVE-2023-0701, https://www.suse.com/security/cve/CVE-2023-0702, https://www.suse.com/security/cve/CVE-2023-0703, https://www.suse.com/security/cve/CVE-2023-0704, https://www.suse.com/security/cve/CVE-2023-0705