SUSE 5168 Published by

A chromium update is available for SUSE Linux Enterprise 15 SP5:

openSUSE-SU-2024:0084-1: important: Security update for chromium




openSUSE-SU-2024:0084-1: important: Security update for chromium


openSUSE Security Update: Security update for chromium
_______________________________

Announcement ID: openSUSE-SU-2024:0084-1
Rating: important
References: #1220131 #1220604 #1221105 #1221335
Cross-References: CVE-2024-1669 CVE-2024-1670 CVE-2024-1671
CVE-2024-1672 CVE-2024-1673 CVE-2024-1674
CVE-2024-1675 CVE-2024-1676 CVE-2024-2173
CVE-2024-2174 CVE-2024-2176 CVE-2024-2400

Affected Products:
openSUSE Backports SLE-15-SP5
_______________________________

An update that fixes 12 vulnerabilities is now available.

Description:

This update for chromium fixes the following issue:

Chromium 122.0.6261.128 (boo#1221335)

* CVE-2024-2400: Use after free in Performance Manager

Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)

* New upstream security release.
* CVE-2024-2173: Out of bounds memory access in V8.
* CVE-2024-2174: Inappropriate implementation in V8.
* CVE-2024-2176: Use after free in FedCM.

Chromium 122.0.6261.94

* CVE-2024-1669: Out of bounds memory access in Blink.
* CVE-2024-1670: Use after free in Mojo.
* CVE-2024-1671: Inappropriate implementation in Site Isolation.
* CVE-2024-1672: Inappropriate implementation in Content Security Policy.
* CVE-2024-1673: Use after free in Accessibility.
* CVE-2024-1674: Inappropriate implementation in Navigation.
* CVE-2024-1675: Insufficient policy enforcement in Download.
* CVE-2024-1676: Inappropriate implementation in Navigation.
* Type Confusion in V8

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2024-84=1

Package List:

- openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64):

clang17-17.0.6-bp155.2.2
clang17-debuginfo-17.0.6-bp155.2.2
clang17-devel-17.0.6-bp155.2.2
libLLVM17-17.0.6-bp155.2.2
libLLVM17-debuginfo-17.0.6-bp155.2.2
libLTO17-17.0.6-bp155.2.2
libLTO17-debuginfo-17.0.6-bp155.2.2
libclang-cpp17-17.0.6-bp155.2.2
libclang-cpp17-debuginfo-17.0.6-bp155.2.2
lld17-17.0.6-bp155.2.2
lld17-debuginfo-17.0.6-bp155.2.2
llvm17-17.0.6-bp155.2.2
llvm17-debuginfo-17.0.6-bp155.2.2
llvm17-devel-17.0.6-bp155.2.2
llvm17-devel-debuginfo-17.0.6-bp155.2.2
llvm17-gold-17.0.6-bp155.2.2
llvm17-gold-debuginfo-17.0.6-bp155.2.2
llvm17-libclang13-17.0.6-bp155.2.2
llvm17-libclang13-debuginfo-17.0.6-bp155.2.2
llvm17-polly-17.0.6-bp155.2.2
llvm17-polly-debuginfo-17.0.6-bp155.2.2
llvm17-polly-devel-17.0.6-bp155.2.2

- openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le x86_64):

libomp17-devel-17.0.6-bp155.2.2
libomp17-devel-debuginfo-17.0.6-bp155.2.2

- openSUSE Backports SLE-15-SP5 (aarch64 x86_64):

chromedriver-122.0.6261.128-bp155.2.75.1
chromedriver-debuginfo-122.0.6261.128-bp155.2.75.1
chromium-122.0.6261.128-bp155.2.75.1
chromium-debuginfo-122.0.6261.128-bp155.2.75.1
liblldb17-17.0.6-bp155.2.2
liblldb17-debuginfo-17.0.6-bp155.2.2
lldb17-17.0.6-bp155.2.2
lldb17-debuginfo-17.0.6-bp155.2.2
lldb17-devel-17.0.6-bp155.2.2
llvm17-libc++-devel-17.0.6-bp155.2.2
llvm17-libc++1-17.0.6-bp155.2.2
llvm17-libc++1-debuginfo-17.0.6-bp155.2.2
llvm17-libc++abi-devel-17.0.6-bp155.2.2
llvm17-libc++abi1-17.0.6-bp155.2.2
llvm17-libc++abi1-debuginfo-17.0.6-bp155.2.2
python3-lldb17-17.0.6-bp155.2.2

- openSUSE Backports SLE-15-SP5 (aarch64_ilp32):

libLLVM17-64bit-17.0.6-bp155.2.2
libLLVM17-64bit-debuginfo-17.0.6-bp155.2.2
libclang-cpp17-64bit-17.0.6-bp155.2.2
libclang-cpp17-64bit-debuginfo-17.0.6-bp155.2.2

- openSUSE Backports SLE-15-SP5 (x86_64):

libLLVM17-32bit-17.0.6-bp155.2.2
libLLVM17-32bit-debuginfo-17.0.6-bp155.2.2
libclang-cpp17-32bit-17.0.6-bp155.2.2
libclang-cpp17-32bit-debuginfo-17.0.6-bp155.2.2

- openSUSE Backports SLE-15-SP5 (noarch):

clang17-doc-17.0.6-bp155.2.2
llvm17-doc-17.0.6-bp155.2.2
llvm17-opt-viewer-17.0.6-bp155.2.2
llvm17-vim-plugins-17.0.6-bp155.2.2
python3-clang17-17.0.6-bp155.2.2

References:

https://www.suse.com/security/cve/CVE-2024-1669.html
https://www.suse.com/security/cve/CVE-2024-1670.html
https://www.suse.com/security/cve/CVE-2024-1671.html
https://www.suse.com/security/cve/CVE-2024-1672.html
https://www.suse.com/security/cve/CVE-2024-1673.html
https://www.suse.com/security/cve/CVE-2024-1674.html
https://www.suse.com/security/cve/CVE-2024-1675.html
https://www.suse.com/security/cve/CVE-2024-1676.html
https://www.suse.com/security/cve/CVE-2024-2173.html
https://www.suse.com/security/cve/CVE-2024-2174.html
https://www.suse.com/security/cve/CVE-2024-2176.html
https://www.suse.com/security/cve/CVE-2024-2400.html
https://bugzilla.suse.com/1220131
https://bugzilla.suse.com/1220604
https://bugzilla.suse.com/1221105
https://bugzilla.suse.com/1221335