This update for chromium fixes the following issues:
- Chromium 114.0.5735.198 (boo#1212755):
* CVE-2023-3420: Type Confusion in V8
* CVE-2023-3421: Use after free in Media
* CVE-2023-3422: Use after free in Guest View
- Install Qt5 library & prepare for Qt6 in 115
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP5:
zypper in -t patch openSUSE-2023-159=1
- openSUSE Backports SLE-15-SP4:
zypper in -t patch openSUSE-2023-159=1
- openSUSE Backports SLE-15-SP5 (aarch64 x86_64):
chromedriver-114.0.5735.198-bp155.2.10.1
chromedriver-debuginfo-114.0.5735.198-bp155.2.10.1
chromium-114.0.5735.198-bp155.2.10.1
chromium-debuginfo-114.0.5735.198-bp155.2.10.1
- openSUSE Backports SLE-15-SP4 (aarch64 x86_64):
chromedriver-114.0.5735.198-bp154.2.96.1
chromium-114.0.5735.198-bp154.2.96.1
https://www.suse.com/security/cve/CVE-2023-3420.html
https://www.suse.com/security/cve/CVE-2023-3421.html
https://www.suse.com/security/cve/CVE-2023-3422.html
https://bugzilla.suse.com/1212755
Get the latest Linux and open source security news straight to your inbox.