Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

openSUSE: 2023:0246-1 Important: Heap Overflow in Chromium

opensuse
Calendar Grey September 13, 2023
Dist Opensuse Esm H88
Essential security upgrade for openSUSE tackling heap overflow vulnerabilities in chromium, rectifies CVE-2023-4863.
An update that fixes one vulnerability is now available

Description

This update for chromium fixes the following issues:

Update to version 116.0.5845.187 (boo#1215231):

* CVE-2023-4863: Heap buffer overflow in WebP

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2023-246=1

- openSUSE Backports SLE-15-SP4:

zypper in -t patch openSUSE-2023-246=1

Package List

- openSUSE Backports SLE-15-SP5 (aarch64 x86_64):

chromedriver-116.0.5845.187-bp155.2.31.1

chromedriver-debuginfo-116.0.5845.187-bp155.2.31.1

chromium-116.0.5845.187-bp155.2.31.1

chromium-debuginfo-116.0.5845.187-bp155.2.31.1

- openSUSE Backports SLE-15-SP4 (aarch64 x86_64):

chromedriver-116.0.5845.187-bp154.2.117.1

chromium-116.0.5845.187-bp154.2.117.1

References

https://www.suse.com/security/cve/CVE-2023-4863.html

https://bugzilla.suse.com/1215231

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2023:0246-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here