chromedriver-115.0.5790.98-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13059 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z chromedriver-115.0.5790.98-1.1 on GA media These are all security issues fixed in the chromedriver-115.0.5790.98-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13059 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:13059 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-3727/ SUSE CVE CVE-2023-3727 page https://www.suse.com/security/cve/CVE-2023-3728/ SUSE CVE CVE-2023-3728 page https://www.suse.com/security/cve/CVE-2023-3730/ SUSE CVE CVE-2023-3730 page https://www.suse.com/security/cve/CVE-2023-3732/ SUSE CVE CVE-2023-3732 page https://www.suse.com/security/cve/CVE-2023-3733/ SUSE CVE CVE-2023-3733 page https://www.suse.com/security/cve/CVE-2023-3734/ SUSE CVE CVE-2023-3734 page https://www.suse.com/security/cve/CVE-2023-3735/ SUSE CVE CVE-2023-3735 page https://www.suse.com/security/cve/CVE-2023-3736/ SUSE CVE CVE-2023-3736 page https://www.suse.com/security/cve/CVE-2023-3737/ SUSE CVE CVE-2023-3737 page https://www.suse.com/security/cve/CVE-2023-3738/ SUSE CVE CVE-2023-3738 page https://www.suse.com/security/cve/CVE-2023-3740/ SUSE CVE CVE-2023-3740 page openSUSE Tumbleweed chromedriver-115.0.5790.98-1.1 chromium-115.0.5790.98-1.1 chromedriver-115.0.5790.98-1.1 as a component of openSUSE Tumbleweed chromium-115.0.5790.98-1.1 as a component of openSUSE Tumbleweed Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3727 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3727.html CVE-2023-3727 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3728 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3728.html CVE-2023-3728 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3730 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3730.html CVE-2023-3730 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3732 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3732.html CVE-2023-3732 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3733 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3733.html CVE-2023-3733 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3734 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3734.html CVE-2023-3734 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3735 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3735.html CVE-2023-3735 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3736 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3736.html CVE-2023-3736 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3737 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3737.html CVE-2023-3737 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3738 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3738.html CVE-2023-3738 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafted background URL. (Chromium security severity: Low) CVE-2023-3740 openSUSE Tumbleweed:chromedriver-115.0.5790.98-1.1 openSUSE Tumbleweed:chromium-115.0.5790.98-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3740.html CVE-2023-3740 https://bugzilla.suse.com/1213462 SUSE Bug 1213462