Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

openSUSE: 2023:0325-1 Important: Chromium Use After Free

opensuse
Calendar Grey October 26, 2023
Dist Opensuse Esm H88
OpenSUSE Security Bulletin: Urgent chromium patch released to mitigate the CVE-2023-5472 flaw now accessible.
An update that fixes one vulnerability is now available

Description

This update for chromium fixes the following issues:

- Chromium 118.0.5993.117 (boo#1216549)

* CVE-2023-5472: Use after free in Profiles

* Various fixes from internal audits, fuzzing and other initiatives

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2023-325=1

- openSUSE Backports SLE-15-SP4:

zypper in -t patch openSUSE-2023-325=1

Package List

- openSUSE Backports SLE-15-SP5 (aarch64 x86_64):

chromedriver-118.0.5993.117-bp155.2.52.1

chromedriver-debuginfo-118.0.5993.117-bp155.2.52.1

chromium-118.0.5993.117-bp155.2.52.1

chromium-debuginfo-118.0.5993.117-bp155.2.52.1

- openSUSE Backports SLE-15-SP4 (aarch64 x86_64):

chromedriver-118.0.5993.117-bp154.2.138.1

chromium-118.0.5993.117-bp154.2.138.1

References

https://www.suse.com/security/cve/CVE-2023-5472.html

https://bugzilla.suse.com/1216549

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2023:0325-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here