openSUSE Build Service

Security update for chromium

This update for chromium fixes the following issues:

Chromium 119.0.6045.123 (boo#1216978)

* CVE-2023-5996: Use after free in WebAudio

Chromium 119.0.6045.105 (boo#1216783)

* CVE-2023-5480: Inappropriate implementation in Payments
* CVE-2023-5482: Insufficient data validation in USB
* CVE-2023-5849: Integer overflow in USB
* CVE-2023-5850: Incorrect security UI in Downloads
* CVE-2023-5851: Inappropriate implementation in Downloads
* CVE-2023-5852: Use after free in Printing
* CVE-2023-5853: Incorrect security UI in Downloads
* CVE-2023-5854: Use after free in Profiles
* CVE-2023-5855: Use after free in Reading Mode
* CVE-2023-5856: Use after free in Side Panel
* CVE-2023-5857: Inappropriate implementation in Downloads
* CVE-2023-5858: Inappropriate implementation in WebApp Provider
* CVE-2023-5859: Incorrect security UI in Picture In Picture

gn was updated to version 0.20231023:

* many updates to support Chromium 119 build

Submitted by Andreas Stieger (AndreasStieger)

Fixed bugs

bnc#1216783

VUL-0: chromium: multiple security issues fixed in version 119.0.6045.105

bnc#1216978

VUL-0: CVE-2023-5996: Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)