ungoogled-chromium-115.0.5790.102-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13100 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z ungoogled-chromium-115.0.5790.102-1.1 on GA media These are all security issues fixed in the ungoogled-chromium-115.0.5790.102-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13100 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:13100 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-2929/ SUSE CVE CVE-2023-2929 page https://www.suse.com/security/cve/CVE-2023-2930/ SUSE CVE CVE-2023-2930 page https://www.suse.com/security/cve/CVE-2023-2931/ SUSE CVE CVE-2023-2931 page https://www.suse.com/security/cve/CVE-2023-2932/ SUSE CVE CVE-2023-2932 page https://www.suse.com/security/cve/CVE-2023-2933/ SUSE CVE CVE-2023-2933 page https://www.suse.com/security/cve/CVE-2023-2934/ SUSE CVE CVE-2023-2934 page https://www.suse.com/security/cve/CVE-2023-2935/ SUSE CVE CVE-2023-2935 page https://www.suse.com/security/cve/CVE-2023-2936/ SUSE CVE CVE-2023-2936 page https://www.suse.com/security/cve/CVE-2023-2937/ SUSE CVE CVE-2023-2937 page https://www.suse.com/security/cve/CVE-2023-2938/ SUSE CVE CVE-2023-2938 page https://www.suse.com/security/cve/CVE-2023-2939/ SUSE CVE CVE-2023-2939 page https://www.suse.com/security/cve/CVE-2023-2940/ SUSE CVE CVE-2023-2940 page https://www.suse.com/security/cve/CVE-2023-2941/ SUSE CVE CVE-2023-2941 page https://www.suse.com/security/cve/CVE-2023-3079/ SUSE CVE CVE-2023-3079 page https://www.suse.com/security/cve/CVE-2023-3214/ SUSE CVE CVE-2023-3214 page https://www.suse.com/security/cve/CVE-2023-3215/ SUSE CVE CVE-2023-3215 page https://www.suse.com/security/cve/CVE-2023-3216/ SUSE CVE CVE-2023-3216 page https://www.suse.com/security/cve/CVE-2023-3217/ SUSE CVE CVE-2023-3217 page https://www.suse.com/security/cve/CVE-2023-3420/ SUSE CVE CVE-2023-3420 page https://www.suse.com/security/cve/CVE-2023-3421/ SUSE CVE CVE-2023-3421 page https://www.suse.com/security/cve/CVE-2023-3422/ SUSE CVE CVE-2023-3422 page https://www.suse.com/security/cve/CVE-2023-3727/ SUSE CVE CVE-2023-3727 page https://www.suse.com/security/cve/CVE-2023-3728/ SUSE CVE CVE-2023-3728 page https://www.suse.com/security/cve/CVE-2023-3730/ SUSE CVE CVE-2023-3730 page https://www.suse.com/security/cve/CVE-2023-3732/ SUSE CVE CVE-2023-3732 page https://www.suse.com/security/cve/CVE-2023-3733/ SUSE CVE CVE-2023-3733 page https://www.suse.com/security/cve/CVE-2023-3734/ SUSE CVE CVE-2023-3734 page https://www.suse.com/security/cve/CVE-2023-3735/ SUSE CVE CVE-2023-3735 page https://www.suse.com/security/cve/CVE-2023-3736/ SUSE CVE CVE-2023-3736 page https://www.suse.com/security/cve/CVE-2023-3737/ SUSE CVE CVE-2023-3737 page https://www.suse.com/security/cve/CVE-2023-3738/ SUSE CVE CVE-2023-3738 page https://www.suse.com/security/cve/CVE-2023-3740/ SUSE CVE CVE-2023-3740 page openSUSE Tumbleweed ungoogled-chromium-115.0.5790.102-1.1 ungoogled-chromium-chromedriver-115.0.5790.102-1.1 ungoogled-chromium-115.0.5790.102-1.1 as a component of openSUSE Tumbleweed ungoogled-chromium-chromedriver-115.0.5790.102-1.1 as a component of openSUSE Tumbleweed Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2929 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2929.html CVE-2023-2929 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2930 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2930.html CVE-2023-2930 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) CVE-2023-2931 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2931.html CVE-2023-2931 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) CVE-2023-2932 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2932.html CVE-2023-2932 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) CVE-2023-2933 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2933.html CVE-2023-2933 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2934 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2934.html CVE-2023-2934 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2935 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2935.html CVE-2023-2935 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2936 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2936.html CVE-2023-2936 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-2937 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2937.html CVE-2023-2937 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-2938 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2938.html CVE-2023-2938 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium) CVE-2023-2939 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2939.html CVE-2023-2939 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-2940 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2940.html CVE-2023-2940 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low) CVE-2023-2941 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-2941.html CVE-2023-2941 https://bugzilla.suse.com/1211843 SUSE Bug 1211843 Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3079 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3079.html CVE-2023-3079 https://bugzilla.suse.com/1212044 SUSE Bug 1212044 Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) CVE-2023-3214 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3214.html CVE-2023-3214 https://bugzilla.suse.com/1212302 SUSE Bug 1212302 Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3215 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3215.html CVE-2023-3215 https://bugzilla.suse.com/1212302 SUSE Bug 1212302 Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3216 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3216.html CVE-2023-3216 https://bugzilla.suse.com/1212302 SUSE Bug 1212302 Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3217 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3217.html CVE-2023-3217 https://bugzilla.suse.com/1212302 SUSE Bug 1212302 Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3420 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3420.html CVE-2023-3420 https://bugzilla.suse.com/1212755 SUSE Bug 1212755 Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3421 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3421.html CVE-2023-3421 https://bugzilla.suse.com/1212755 SUSE Bug 1212755 Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3422 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3422.html CVE-2023-3422 https://bugzilla.suse.com/1212755 SUSE Bug 1212755 Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3727 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3727.html CVE-2023-3727 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3728 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3728.html CVE-2023-3728 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3730 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3730.html CVE-2023-3730 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-3732 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3732.html CVE-2023-3732 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3733 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3733.html CVE-2023-3733 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3734 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3734.html CVE-2023-3734 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3735 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3735.html CVE-2023-3735 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3736 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3736.html CVE-2023-3736 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3737 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3737.html CVE-2023-3737 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-3738 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3738.html CVE-2023-3738 https://bugzilla.suse.com/1213462 SUSE Bug 1213462 Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafted background URL. (Chromium security severity: Low) CVE-2023-3740 openSUSE Tumbleweed:ungoogled-chromium-115.0.5790.102-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-115.0.5790.102-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3740.html CVE-2023-3740 https://bugzilla.suse.com/1213462 SUSE Bug 1213462