Bug 1224045 (CVE-2024-4558) - VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 124.0.6367.155
Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 124.0.6...
Status: RESOLVED FIXED
Alias: CVE-2024-4558
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-08 09:51 UTC by Carlos López
Modified: 2024-05-13 09:13 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos López 2024-05-08 09:51:43 UTC 
This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.


High CVE-2024-4558: Use after free in ANGLE. Reported by gelatin dessert on 2024-04-29

High CVE-2024-4559: Heap buffer overflow in WebAudio. Reported by Cassidy Kim(@cassidy6564) on 2024-03-26

https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html
Comment 1 OBSbugzilla Bot 2024-05-11 05:35:09 UTC 
This is an autogenerated message for OBS integration:
This bug (1224045) was mentioned in
https://build.opensuse.org/request/show/1173380 Factory / chromium
Comment 2 OBSbugzilla Bot 2024-05-11 06:15:10 UTC 
This is an autogenerated message for OBS integration:
This bug (1224045) was mentioned in
https://build.opensuse.org/request/show/1173381 Backports:SLE-15-SP5 / chromium
Comment 3 Marcus Meissner 2024-05-13 04:05:13 UTC 
openSUSE-SU-2024:0123-1: An update that fixes 35 vulnerabilities is now available.

Category: security (important)
Bug References: 1221732,1222035,1222260,1222707,1222958,1223845,1223846,1224045
CVE References: CVE-2024-2625,CVE-2024-2626,CVE-2024-2627,CVE-2024-2628,CVE-2024-2883,CVE-2024-2885,CVE-2024-2886,CVE-2024-2887,CVE-2024-3156,CVE-2024-3157,CVE-2024-3158,CVE-2024-3159,CVE-2024-3515,CVE-2024-3516,CVE-2024-3832,CVE-2024-3833,CVE-2024-3834,CVE-2024-3837,CVE-2024-3838,CVE-2024-3839,CVE-2024-3840,CVE-2024-3841,CVE-2024-3843,CVE-2024-3844,CVE-2024-3845,CVE-2024-3846,CVE-2024-3847,CVE-2024-4058,CVE-2024-4059,CVE-2024-4060,CVE-2024-4331,CVE-2024-4368,CVE-2024-4558,CVE-2024-4559,CVE-2024-4671
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    chromium-124.0.6367.201-bp155.2.78.1
Comment 4 Andreas Stieger 2024-05-13 09:13:43 UTC 
Chromium 124.0.6367.201 is in, as I did not get any crashes anymore.