{"affected":[{"ecosystem_specific":{"binaries":[{"chromedriver":"113.0.5672.126-bp154.2.87.1","chromium":"113.0.5672.126-bp154.2.87.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP4","name":"chromium","purl":"purl:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"113.0.5672.126-bp154.2.87.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"chromedriver":"113.0.5672.126-bp154.2.87.1","chromium":"113.0.5672.126-bp154.2.87.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"chromium","purl":"purl:rpm/suse/chromium&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"113.0.5672.126-bp154.2.87.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for chromium fixes the following issues:\n\n- build with llvm15 on Leap\n\n- Chromium 113.0.5672.126 (boo#1211442):\n  * CVE-2023-2721: Use after free in Navigation\n  * CVE-2023-2722: Use after free in Autofill UI\n  * CVE-2023-2723: Use after free in DevTools\n  * CVE-2023-2724: Type Confusion in V8\n  * CVE-2023-2725: Use after free in Guest View\n  * CVE-2023-2726: Inappropriate implementation in WebApp Installs\n  * Various fixes from internal audits, fuzzing and other initiatives\n\n- Chromium 113.0.5672.92 (boo#1211211)\n- Multiple security fixes (boo#1211036):\n  * CVE-2023-2459: Inappropriate implementation in Prompts\n  * CVE-2023-2460: Insufficient validation of untrusted input in Extensions\n  * CVE-2023-2461: Use after free in OS Inputs\n  * CVE-2023-2462: Inappropriate implementation in Prompts\n  * CVE-2023-2463: Inappropriate implementation in Full Screen Mode\n  * CVE-2023-2464: Inappropriate implementation in PictureInPicture\n  * CVE-2023-2465: Inappropriate implementation in CORS\n  * CVE-2023-2466: Inappropriate implementation in Prompts\n  * CVE-2023-2467: Inappropriate implementation in Prompts\n  * CVE-2023-2468: Inappropriate implementation in PictureInPicture\n","id":"openSUSE-SU-2023:0117-1","modified":"2023-05-31T14:40:39Z","published":"2023-05-31T14:40:39Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O7WSJFJTBCMXOOKGPURTAJETTJFNN6NP/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211036"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211211"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211442"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2459"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2461"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2462"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2463"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2464"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2465"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2466"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2467"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2468"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2721"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2722"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2723"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2724"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2725"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2726"}],"related":["CVE-2023-2459","CVE-2023-2460","CVE-2023-2461","CVE-2023-2462","CVE-2023-2463","CVE-2023-2464","CVE-2023-2465","CVE-2023-2466","CVE-2023-2467","CVE-2023-2468","CVE-2023-2721","CVE-2023-2722","CVE-2023-2723","CVE-2023-2724","CVE-2023-2725","CVE-2023-2726"],"summary":"Security update for chromium"}