Bug 1212044

Summary:	VUL-0: chromium: security issue fixed in 114.0.5735.106
Product:	[openSUSE] openSUSE Distribution	Reporter:	Thomas Leroy <thomas.leroy>
Component:	Security	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	Andreas.Stieger, gmbr3
Version:	Leap 15.4
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Bug Depends on:	1212188
Bug Blocks:

Description Thomas Leroy 2023-06-06 07:02:57 UTC

Fixed in Chromium 114.0.5735.106:

- CVE-2023-3079: Type Confusion in V8.

https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html

Comment 1 OBSbugzilla Bot 2023-06-06 10:35:03 UTC

This is an autogenerated message for OBS integration:
This bug (1212044) was mentioned in
https://build.opensuse.org/request/show/1091053 Factory / chromium
https://build.opensuse.org/request/show/1091054 Backports:SLE-15-SP5 / chromium

Comment 2 OBSbugzilla Bot 2023-06-06 20:35:06 UTC

This is an autogenerated message for OBS integration:
This bug (1212044) was mentioned in
https://build.opensuse.org/request/show/1091143 Backports:SLE-15-SP4 / chromium

Comment 3 Andreas Stieger 2023-06-07 04:06:46 UTC

Submitted

Comment 4 Marcus Meissner 2023-06-09 16:05:35 UTC

openSUSE-SU-2023:0124-1: An update that fixes 14 vulnerabilities is now available.\n\nCategory: security (important)\nBug References: 1211843,1212044\nCVE References: CVE-2023-2929,CVE-2023-2930,CVE-2023-2931,CVE-2023-2932,CVE-2023-2933,CVE-2023-2934,CVE-2023-2935,CVE-2023-2936,CVE-2023-2937,CVE-2023-2938,CVE-2023-2939,CVE-2023-2940,CVE-2023-2941,CVE-2023-3079\nJIRA References: \nSources used:\nopenSUSE Backports SLE-15-SP4 (src):    chromium-114.0.5735.106-bp154.2.90.1\n\n

Comment 5 Andreas Stieger 2023-06-09 17:54:26 UTC

Done

Comment 6 Marcus Meissner 2023-06-16 14:37:59 UTC

openSUSE-SU-2023:0123-1: An update that fixes one vulnerability is now available.\n\nCategory: security (important)\nBug References: 1212044\nCVE References: CVE-2023-3079\nJIRA References: \nSources used:\nopenSUSE Backports SLE-15-SP5 (src):    chromium-114.0.5735.106-bp155.2.4.1\n\n

Comment 7 OBSbugzilla Bot 2023-06-18 13:15:04 UTC

This is an autogenerated message for OBS integration:
This bug (1212044) was mentioned in
https://build.opensuse.org/request/show/1093654 Factory / ungoogled-chromium