{"affected":[{"ecosystem_specific":{"binaries":[{"chromedriver":"112.0.5615.121-bp154.2.79.1","chromium":"112.0.5615.121-bp154.2.79.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP4","name":"chromium","purl":"purl:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"112.0.5615.121-bp154.2.79.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"chromedriver":"112.0.5615.121-bp154.2.79.1","chromium":"112.0.5615.121-bp154.2.79.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"chromium","purl":"purl:rpm/suse/chromium&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"112.0.5615.121-bp154.2.79.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for chromium fixes the following issues:\n\n- Chromium 112.0.5615.121:\n\n  * CVE-2023-2033: Type Confusion in V8 (boo#1210478)\n\n- Chromium 112.0.5615.49 \n\n  * CSS now supports nesting rules.\n  * The algorithm to set the initial focus on <dialog> elements was updated.\n  * No-op fetch() handlers on service workers are skipped from now on to make navigations faster\n  * The setter for document.domain is now deprecated.\n  * The recorder in devtools can now record with pierce selectors.\n  * Security fixes (boo#1210126):\n  * CVE-2023-1810: Heap buffer overflow in Visuals\n  * CVE-2023-1811: Use after free in Frames\n  * CVE-2023-1812: Out of bounds memory access in DOM Bindings\n  * CVE-2023-1813: Inappropriate implementation in Extensions\n  * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing\n  * CVE-2023-1815: Use after free in Networking APIs\n  * CVE-2023-1816: Incorrect security UI in Picture In Picture\n  * CVE-2023-1817: Insufficient policy enforcement in Intents\n  * CVE-2023-1818: Use after free in Vulkan\n  * CVE-2023-1819: Out of bounds read in Accessibility\n  * CVE-2023-1820: Heap buffer overflow in Browser History\n  * CVE-2023-1821: Inappropriate implementation in WebShare\n  * CVE-2023-1822: Incorrect security UI in Navigation\n  * CVE-2023-1823: Inappropriate implementation in FedCM\n\n- Chromium 111.0.5563.147:\n\n  * nth-child() validation performance regression for SAP apps\n\n","id":"openSUSE-SU-2023:0092-1","modified":"2023-04-19T15:21:29Z","published":"2023-04-19T15:21:29Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BRCY3MMGSLE74IM7LN5E42APXAOQ5ZQG/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210126"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210478"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1810"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1811"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1812"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1813"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1814"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1815"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1816"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1817"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1818"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1819"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1820"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1821"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1822"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1823"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2033"}],"related":["CVE-2023-1810","CVE-2023-1811","CVE-2023-1812","CVE-2023-1813","CVE-2023-1814","CVE-2023-1815","CVE-2023-1816","CVE-2023-1817","CVE-2023-1818","CVE-2023-1819","CVE-2023-1820","CVE-2023-1821","CVE-2023-1822","CVE-2023-1823","CVE-2023-2033"],"summary":"Security update for chromium"}