openSUSE-SU-2023:0092-1

    Dashboard / Vulnerabilities / openSUSE-SU-2023:0092-1

    openSUSE-SU-2023:0092-1

    Published: 19 Apr 2023Last Modified: 4 Feb 2026

    Summary: Security update for chromium

    Details: This update for chromium fixes the following issues: - Chromium 112.0.5615.121: * CVE-2023-2033: Type Confusion in V8 (boo#1210478) - Chromium 112.0.5615.49 * CSS now supports nesting rules. * The algorithm to set the initial focus on <dialog> elements was updated. * No-op fetch() handlers on service workers are skipped from now on to make navigations faster * The setter for document.domain is now deprecated. * The recorder in devtools can now record with pierce selectors. * Security fixes (boo#1210126): * CVE-2023-1810: Heap buffer overflow in Visuals * CVE-2023-1811: Use after free in Frames * CVE-2023-1812: Out of bounds memory access in DOM Bindings * CVE-2023-1813: Inappropriate implementation in Extensions * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing * CVE-2023-1815: Use after free in Networking APIs * CVE-2023-1816: Incorrect security UI in Picture In Picture * CVE-2023-1817: Insufficient policy enforcement in Intents * CVE-2023-1818: Use after free in Vulkan * CVE-2023-1819: Out of bounds read in Accessibility * CVE-2023-1820: Heap buffer overflow in Browser History * CVE-2023-1821: Inappropriate implementation in WebShare * CVE-2023-1822: Incorrect security UI in Navigation * CVE-2023-1823: Inappropriate implementation in FedCM - Chromium 111.0.5563.147: * nth-child() validation performance regression for SAP apps

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/BRCY3MMGSLE74IM7LN5E42APXAOQ5ZQG/, https://bugzilla.suse.com/1210126, https://bugzilla.suse.com/1210478, https://www.suse.com/security/cve/CVE-2023-1810, https://www.suse.com/security/cve/CVE-2023-1811, https://www.suse.com/security/cve/CVE-2023-1812, https://www.suse.com/security/cve/CVE-2023-1813, https://www.suse.com/security/cve/CVE-2023-1814, https://www.suse.com/security/cve/CVE-2023-1815, https://www.suse.com/security/cve/CVE-2023-1816, https://www.suse.com/security/cve/CVE-2023-1817, https://www.suse.com/security/cve/CVE-2023-1818, https://www.suse.com/security/cve/CVE-2023-1819, https://www.suse.com/security/cve/CVE-2023-1820, https://www.suse.com/security/cve/CVE-2023-1821, https://www.suse.com/security/cve/CVE-2023-1822, https://www.suse.com/security/cve/CVE-2023-1823, https://www.suse.com/security/cve/CVE-2023-2033

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -112.0.5615.121-bp154.2.79.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2023:0092-1 | CVE-DB