openSUSE-SU-2024:0084-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0084-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2024:0084-1
- Upstream
- Related
- Published
- 2024-03-18T07:51:17Z
- Modified
- 2025-05-08T17:48:27.952443Z
- Summary
- Security update for chromium
- Details
-
This update for chromium fixes the following issue:
Chromium 122.0.6261.128 (boo#1221335)
- CVE-2024-2400: Use after free in Performance Manager
Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
- New upstream security release.
- CVE-2024-2173: Out of bounds memory access in V8.
- CVE-2024-2174: Inappropriate implementation in V8.
- CVE-2024-2176: Use after free in FedCM.
Chromium 122.0.6261.94
- CVE-2024-1669: Out of bounds memory access in Blink.
- CVE-2024-1670: Use after free in Mojo.
- CVE-2024-1671: Inappropriate implementation in Site Isolation.
- CVE-2024-1672: Inappropriate implementation in Content Security Policy.
- CVE-2024-1673: Use after free in Accessibility.
- CVE-2024-1674: Inappropriate implementation in Navigation.
- CVE-2024-1675: Insufficient policy enforcement in Download.
- CVE-2024-1676: Inappropriate implementation in Navigation.
- Type Confusion in V8
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LA5F4J2SLVEY6FKG6O3LFDSA2N3OMZH/
- https://bugzilla.suse.com/1220131
- https://bugzilla.suse.com/1220604
- https://bugzilla.suse.com/1221105
- https://bugzilla.suse.com/1221335
- https://www.suse.com/security/cve/CVE-2024-1669
- https://www.suse.com/security/cve/CVE-2024-1670
- https://www.suse.com/security/cve/CVE-2024-1671
- https://www.suse.com/security/cve/CVE-2024-1672
- https://www.suse.com/security/cve/CVE-2024-1673
- https://www.suse.com/security/cve/CVE-2024-1674
- https://www.suse.com/security/cve/CVE-2024-1675
- https://www.suse.com/security/cve/CVE-2024-1676
- https://www.suse.com/security/cve/CVE-2024-2173
- https://www.suse.com/security/cve/CVE-2024-2174
- https://www.suse.com/security/cve/CVE-2024-2176
- https://www.suse.com/security/cve/CVE-2024-2400
Affected packages
SUSE:Package Hub 15 SP5 / chromium
Package
- Name
- chromium
- Purl
- pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed122.0.6261.128-bp155.2.75.1
Ecosystem specific
{
"binaries": [
{
"libclang-cpp17-64bit": "17.0.6-bp155.2.2",
"chromium": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly": "17.0.6-bp155.2.2",
"chromedriver": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly-devel": "17.0.6-bp155.2.2",
"llvm17-vim-plugins": "17.0.6-bp155.2.2",
"llvm17-libc++1": "17.0.6-bp155.2.2",
"python3-clang17": "17.0.6-bp155.2.2",
"liblldb17": "17.0.6-bp155.2.2",
"llvm17-gold": "17.0.6-bp155.2.2",
"lldb17": "17.0.6-bp155.2.2",
"clang17": "17.0.6-bp155.2.2",
"lld17": "17.0.6-bp155.2.2",
"llvm17-doc": "17.0.6-bp155.2.2",
"clang17-doc": "17.0.6-bp155.2.2",
"lldb17-devel": "17.0.6-bp155.2.2",
"llvm17-libclang13": "17.0.6-bp155.2.2",
"python3-lldb17": "17.0.6-bp155.2.2",
"llvm17": "17.0.6-bp155.2.2",
"llvm17-libc++abi1": "17.0.6-bp155.2.2",
"libLLVM17": "17.0.6-bp155.2.2",
"llvm17-devel": "17.0.6-bp155.2.2",
"libLLVM17-64bit": "17.0.6-bp155.2.2",
"libomp17-devel": "17.0.6-bp155.2.2",
"libLTO17": "17.0.6-bp155.2.2",
"libLLVM17-32bit": "17.0.6-bp155.2.2",
"llvm17-libc++-devel": "17.0.6-bp155.2.2",
"libclang-cpp17-32bit": "17.0.6-bp155.2.2",
"clang17-devel": "17.0.6-bp155.2.2",
"libclang-cpp17": "17.0.6-bp155.2.2",
"llvm17-opt-viewer": "17.0.6-bp155.2.2",
"llvm17-libc++abi-devel": "17.0.6-bp155.2.2"
}
]
}
SUSE:Package Hub 15 SP5 / llvm17
Package
- Name
- llvm17
- Purl
- pkg:rpm/suse/llvm17&distro=SUSE%20Package%20Hub%2015%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed17.0.6-bp155.2.2
Ecosystem specific
{
"binaries": [
{
"libclang-cpp17-64bit": "17.0.6-bp155.2.2",
"chromium": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly": "17.0.6-bp155.2.2",
"chromedriver": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly-devel": "17.0.6-bp155.2.2",
"llvm17-vim-plugins": "17.0.6-bp155.2.2",
"llvm17-libc++1": "17.0.6-bp155.2.2",
"python3-clang17": "17.0.6-bp155.2.2",
"liblldb17": "17.0.6-bp155.2.2",
"llvm17-gold": "17.0.6-bp155.2.2",
"lldb17": "17.0.6-bp155.2.2",
"clang17": "17.0.6-bp155.2.2",
"lld17": "17.0.6-bp155.2.2",
"llvm17-doc": "17.0.6-bp155.2.2",
"clang17-doc": "17.0.6-bp155.2.2",
"lldb17-devel": "17.0.6-bp155.2.2",
"llvm17-libclang13": "17.0.6-bp155.2.2",
"python3-lldb17": "17.0.6-bp155.2.2",
"llvm17": "17.0.6-bp155.2.2",
"llvm17-libc++abi1": "17.0.6-bp155.2.2",
"libLLVM17": "17.0.6-bp155.2.2",
"llvm17-devel": "17.0.6-bp155.2.2",
"libLLVM17-64bit": "17.0.6-bp155.2.2",
"libomp17-devel": "17.0.6-bp155.2.2",
"libLTO17": "17.0.6-bp155.2.2",
"libLLVM17-32bit": "17.0.6-bp155.2.2",
"llvm17-libc++-devel": "17.0.6-bp155.2.2",
"libclang-cpp17-32bit": "17.0.6-bp155.2.2",
"clang17-devel": "17.0.6-bp155.2.2",
"libclang-cpp17": "17.0.6-bp155.2.2",
"llvm17-opt-viewer": "17.0.6-bp155.2.2",
"llvm17-libc++abi-devel": "17.0.6-bp155.2.2"
}
]
}
openSUSE:Leap 15.5 / chromium
Package
- Name
- chromium
- Purl
- pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed122.0.6261.128-bp155.2.75.1
Ecosystem specific
{
"binaries": [
{
"libclang-cpp17-64bit": "17.0.6-bp155.2.2",
"chromium": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly": "17.0.6-bp155.2.2",
"chromedriver": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly-devel": "17.0.6-bp155.2.2",
"llvm17-vim-plugins": "17.0.6-bp155.2.2",
"llvm17-libc++1": "17.0.6-bp155.2.2",
"python3-clang17": "17.0.6-bp155.2.2",
"liblldb17": "17.0.6-bp155.2.2",
"llvm17-gold": "17.0.6-bp155.2.2",
"lldb17": "17.0.6-bp155.2.2",
"clang17": "17.0.6-bp155.2.2",
"lld17": "17.0.6-bp155.2.2",
"llvm17-doc": "17.0.6-bp155.2.2",
"clang17-doc": "17.0.6-bp155.2.2",
"lldb17-devel": "17.0.6-bp155.2.2",
"llvm17-libclang13": "17.0.6-bp155.2.2",
"python3-lldb17": "17.0.6-bp155.2.2",
"llvm17": "17.0.6-bp155.2.2",
"llvm17-libc++abi1": "17.0.6-bp155.2.2",
"libLLVM17": "17.0.6-bp155.2.2",
"llvm17-devel": "17.0.6-bp155.2.2",
"libLLVM17-64bit": "17.0.6-bp155.2.2",
"libomp17-devel": "17.0.6-bp155.2.2",
"libLTO17": "17.0.6-bp155.2.2",
"libLLVM17-32bit": "17.0.6-bp155.2.2",
"llvm17-libc++-devel": "17.0.6-bp155.2.2",
"libclang-cpp17-32bit": "17.0.6-bp155.2.2",
"clang17-devel": "17.0.6-bp155.2.2",
"libclang-cpp17": "17.0.6-bp155.2.2",
"llvm17-opt-viewer": "17.0.6-bp155.2.2",
"llvm17-libc++abi-devel": "17.0.6-bp155.2.2"
}
]
}
openSUSE:Leap 15.5 / llvm17
Package
- Name
- llvm17
- Purl
- pkg:rpm/opensuse/llvm17&distro=openSUSE%20Leap%2015.5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed17.0.6-bp155.2.2
Ecosystem specific
{
"binaries": [
{
"libclang-cpp17-64bit": "17.0.6-bp155.2.2",
"chromium": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly": "17.0.6-bp155.2.2",
"chromedriver": "122.0.6261.128-bp155.2.75.1",
"llvm17-polly-devel": "17.0.6-bp155.2.2",
"llvm17-vim-plugins": "17.0.6-bp155.2.2",
"llvm17-libc++1": "17.0.6-bp155.2.2",
"python3-clang17": "17.0.6-bp155.2.2",
"liblldb17": "17.0.6-bp155.2.2",
"llvm17-gold": "17.0.6-bp155.2.2",
"lldb17": "17.0.6-bp155.2.2",
"clang17": "17.0.6-bp155.2.2",
"lld17": "17.0.6-bp155.2.2",
"llvm17-doc": "17.0.6-bp155.2.2",
"clang17-doc": "17.0.6-bp155.2.2",
"lldb17-devel": "17.0.6-bp155.2.2",
"llvm17-libclang13": "17.0.6-bp155.2.2",
"python3-lldb17": "17.0.6-bp155.2.2",
"llvm17": "17.0.6-bp155.2.2",
"llvm17-libc++abi1": "17.0.6-bp155.2.2",
"libLLVM17": "17.0.6-bp155.2.2",
"llvm17-devel": "17.0.6-bp155.2.2",
"libLLVM17-64bit": "17.0.6-bp155.2.2",
"libomp17-devel": "17.0.6-bp155.2.2",
"libLTO17": "17.0.6-bp155.2.2",
"libLLVM17-32bit": "17.0.6-bp155.2.2",
"llvm17-libc++-devel": "17.0.6-bp155.2.2",
"libclang-cpp17-32bit": "17.0.6-bp155.2.2",
"clang17-devel": "17.0.6-bp155.2.2",
"libclang-cpp17": "17.0.6-bp155.2.2",
"llvm17-opt-viewer": "17.0.6-bp155.2.2",
"llvm17-libc++abi-devel": "17.0.6-bp155.2.2"
}
]
}