openSUSE-SU-2024:0084-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2024:0084-1
Upstream
CVE (12)
Related
Published
2024-03-18T07:51:17Z
Modified
2026-03-11T07:33:32Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issue:

Chromium 122.0.6261.128 (boo#1221335)

  • CVE-2024-2400: Use after free in Performance Manager

Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)

  • New upstream security release.
  • CVE-2024-2173: Out of bounds memory access in V8.
  • CVE-2024-2174: Inappropriate implementation in V8.
  • CVE-2024-2176: Use after free in FedCM.

Chromium 122.0.6261.94

  • CVE-2024-1669: Out of bounds memory access in Blink.
  • CVE-2024-1670: Use after free in Mojo.
  • CVE-2024-1671: Inappropriate implementation in Site Isolation.
  • CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  • CVE-2024-1673: Use after free in Accessibility.
  • CVE-2024-1674: Inappropriate implementation in Navigation.
  • CVE-2024-1675: Insufficient policy enforcement in Download.
  • CVE-2024-1676: Inappropriate implementation in Navigation.
  • Type Confusion in V8
References

Affected packages

SUSE:Package Hub 15 SP5 / chromium

Package

Name
chromium
Purl
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
122.0.6261.128-bp155.2.75.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "122.0.6261.128-bp155.2.75.1",
            "chromium":  "122.0.6261.128-bp155.2.75.1",
            "clang17":  "17.0.6-bp155.2.2",
            "clang17-devel":  "17.0.6-bp155.2.2",
            "clang17-doc":  "17.0.6-bp155.2.2",
            "libLLVM17":  "17.0.6-bp155.2.2",
            "libLLVM17-32bit":  "17.0.6-bp155.2.2",
            "libLLVM17-64bit":  "17.0.6-bp155.2.2",
            "libLTO17":  "17.0.6-bp155.2.2",
            "libclang-cpp17":  "17.0.6-bp155.2.2",
            "libclang-cpp17-32bit":  "17.0.6-bp155.2.2",
            "libclang-cpp17-64bit":  "17.0.6-bp155.2.2",
            "liblldb17":  "17.0.6-bp155.2.2",
            "libomp17-devel":  "17.0.6-bp155.2.2",
            "lld17":  "17.0.6-bp155.2.2",
            "lldb17":  "17.0.6-bp155.2.2",
            "lldb17-devel":  "17.0.6-bp155.2.2",
            "llvm17":  "17.0.6-bp155.2.2",
            "llvm17-devel":  "17.0.6-bp155.2.2",
            "llvm17-doc":  "17.0.6-bp155.2.2",
            "llvm17-gold":  "17.0.6-bp155.2.2",
            "llvm17-libc++-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++1":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi1":  "17.0.6-bp155.2.2",
            "llvm17-libclang13":  "17.0.6-bp155.2.2",
            "llvm17-opt-viewer":  "17.0.6-bp155.2.2",
            "llvm17-polly":  "17.0.6-bp155.2.2",
            "llvm17-polly-devel":  "17.0.6-bp155.2.2",
            "llvm17-vim-plugins":  "17.0.6-bp155.2.2",
            "python3-clang17":  "17.0.6-bp155.2.2",
            "python3-lldb17":  "17.0.6-bp155.2.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json"

SUSE:Package Hub 15 SP5 / llvm17

Package

Name
llvm17
Purl
pkg:rpm/suse/llvm17&distro=SUSE%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
17.0.6-bp155.2.2

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "122.0.6261.128-bp155.2.75.1",
            "chromium":  "122.0.6261.128-bp155.2.75.1",
            "clang17":  "17.0.6-bp155.2.2",
            "clang17-devel":  "17.0.6-bp155.2.2",
            "clang17-doc":  "17.0.6-bp155.2.2",
            "libLLVM17":  "17.0.6-bp155.2.2",
            "libLLVM17-32bit":  "17.0.6-bp155.2.2",
            "libLLVM17-64bit":  "17.0.6-bp155.2.2",
            "libLTO17":  "17.0.6-bp155.2.2",
            "libclang-cpp17":  "17.0.6-bp155.2.2",
            "libclang-cpp17-32bit":  "17.0.6-bp155.2.2",
            "libclang-cpp17-64bit":  "17.0.6-bp155.2.2",
            "liblldb17":  "17.0.6-bp155.2.2",
            "libomp17-devel":  "17.0.6-bp155.2.2",
            "lld17":  "17.0.6-bp155.2.2",
            "lldb17":  "17.0.6-bp155.2.2",
            "lldb17-devel":  "17.0.6-bp155.2.2",
            "llvm17":  "17.0.6-bp155.2.2",
            "llvm17-devel":  "17.0.6-bp155.2.2",
            "llvm17-doc":  "17.0.6-bp155.2.2",
            "llvm17-gold":  "17.0.6-bp155.2.2",
            "llvm17-libc++-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++1":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi1":  "17.0.6-bp155.2.2",
            "llvm17-libclang13":  "17.0.6-bp155.2.2",
            "llvm17-opt-viewer":  "17.0.6-bp155.2.2",
            "llvm17-polly":  "17.0.6-bp155.2.2",
            "llvm17-polly-devel":  "17.0.6-bp155.2.2",
            "llvm17-vim-plugins":  "17.0.6-bp155.2.2",
            "python3-clang17":  "17.0.6-bp155.2.2",
            "python3-lldb17":  "17.0.6-bp155.2.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json"

openSUSE:Leap 15.5 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
122.0.6261.128-bp155.2.75.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "122.0.6261.128-bp155.2.75.1",
            "chromium":  "122.0.6261.128-bp155.2.75.1",
            "clang17":  "17.0.6-bp155.2.2",
            "clang17-devel":  "17.0.6-bp155.2.2",
            "clang17-doc":  "17.0.6-bp155.2.2",
            "libLLVM17":  "17.0.6-bp155.2.2",
            "libLLVM17-32bit":  "17.0.6-bp155.2.2",
            "libLLVM17-64bit":  "17.0.6-bp155.2.2",
            "libLTO17":  "17.0.6-bp155.2.2",
            "libclang-cpp17":  "17.0.6-bp155.2.2",
            "libclang-cpp17-32bit":  "17.0.6-bp155.2.2",
            "libclang-cpp17-64bit":  "17.0.6-bp155.2.2",
            "liblldb17":  "17.0.6-bp155.2.2",
            "libomp17-devel":  "17.0.6-bp155.2.2",
            "lld17":  "17.0.6-bp155.2.2",
            "lldb17":  "17.0.6-bp155.2.2",
            "lldb17-devel":  "17.0.6-bp155.2.2",
            "llvm17":  "17.0.6-bp155.2.2",
            "llvm17-devel":  "17.0.6-bp155.2.2",
            "llvm17-doc":  "17.0.6-bp155.2.2",
            "llvm17-gold":  "17.0.6-bp155.2.2",
            "llvm17-libc++-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++1":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi1":  "17.0.6-bp155.2.2",
            "llvm17-libclang13":  "17.0.6-bp155.2.2",
            "llvm17-opt-viewer":  "17.0.6-bp155.2.2",
            "llvm17-polly":  "17.0.6-bp155.2.2",
            "llvm17-polly-devel":  "17.0.6-bp155.2.2",
            "llvm17-vim-plugins":  "17.0.6-bp155.2.2",
            "python3-clang17":  "17.0.6-bp155.2.2",
            "python3-lldb17":  "17.0.6-bp155.2.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json"

openSUSE:Leap 15.5 / llvm17

Package

Name
llvm17
Purl
pkg:rpm/opensuse/llvm17&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
17.0.6-bp155.2.2

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "122.0.6261.128-bp155.2.75.1",
            "chromium":  "122.0.6261.128-bp155.2.75.1",
            "clang17":  "17.0.6-bp155.2.2",
            "clang17-devel":  "17.0.6-bp155.2.2",
            "clang17-doc":  "17.0.6-bp155.2.2",
            "libLLVM17":  "17.0.6-bp155.2.2",
            "libLLVM17-32bit":  "17.0.6-bp155.2.2",
            "libLLVM17-64bit":  "17.0.6-bp155.2.2",
            "libLTO17":  "17.0.6-bp155.2.2",
            "libclang-cpp17":  "17.0.6-bp155.2.2",
            "libclang-cpp17-32bit":  "17.0.6-bp155.2.2",
            "libclang-cpp17-64bit":  "17.0.6-bp155.2.2",
            "liblldb17":  "17.0.6-bp155.2.2",
            "libomp17-devel":  "17.0.6-bp155.2.2",
            "lld17":  "17.0.6-bp155.2.2",
            "lldb17":  "17.0.6-bp155.2.2",
            "lldb17-devel":  "17.0.6-bp155.2.2",
            "llvm17":  "17.0.6-bp155.2.2",
            "llvm17-devel":  "17.0.6-bp155.2.2",
            "llvm17-doc":  "17.0.6-bp155.2.2",
            "llvm17-gold":  "17.0.6-bp155.2.2",
            "llvm17-libc++-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++1":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi-devel":  "17.0.6-bp155.2.2",
            "llvm17-libc++abi1":  "17.0.6-bp155.2.2",
            "llvm17-libclang13":  "17.0.6-bp155.2.2",
            "llvm17-opt-viewer":  "17.0.6-bp155.2.2",
            "llvm17-polly":  "17.0.6-bp155.2.2",
            "llvm17-polly-devel":  "17.0.6-bp155.2.2",
            "llvm17-vim-plugins":  "17.0.6-bp155.2.2",
            "python3-clang17":  "17.0.6-bp155.2.2",
            "python3-lldb17":  "17.0.6-bp155.2.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json"