Bug 1224818 (CVE-2024-5157, CVE-2024-5158, CVE-2024-5159, CVE-2024-5160) - VUL-0: chromium: multiple vulnerabilities fixed in 125.0.6422.76
Summary: VUL-0: chromium: multiple vulnerabilities fixed in 125.0.6422.76
Status: RESOLVED FIXED
Alias: CVE-2024-5157, CVE-2024-5158, CVE-2024-5159, CVE-2024-5160
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 15.5
Hardware: Other Other
: P3 - Medium : Normal (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-21 20:44 UTC by Andreas Stieger
Modified: 2024-05-23 11:11 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Stieger 2024-05-21 20:44:40 UTC 
Fixed in chromium 125.0.6422.76:

* CVE-2024-5157: Use after free in Scheduling.
* CVE-2024-5158: Type Confusion in V8
* CVE-2024-5159: Heap buffer overflow in ANGLE
* CVE-2024-5160: Heap buffer overflow in Dawn
* Various fixes from internal audits, fuzzing and other initiatives

https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_21.html
Comment 1 OBSbugzilla Bot 2024-05-22 06:45:03 UTC 
This is an autogenerated message for OBS integration:
This bug (1224818) was mentioned in
https://build.opensuse.org/request/show/1175671 Factory / chromium
https://build.opensuse.org/request/show/1175672 Backports:SLE-15-SP5 / chromium
Comment 2 Marcus Meissner 2024-05-23 10:04:53 UTC 
openSUSE-SU-2024:0137-1: An update that fixes four vulnerabilities is now available.

Category: security (important)
Bug References: 1224818
CVE References: CVE-2024-5157,CVE-2024-5158,CVE-2024-5159,CVE-2024-5160
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    chromium-125.0.6422.76-bp155.2.85.2
Comment 3 Andreas Stieger 2024-05-23 11:11:55 UTC 
done