File _patchinfo of Package patchinfo.18103

<patchinfo incident="18103">
  <issue tracker="bnc" id="1215778">VUL-0: CVE-2023-5217: libvpx: Heap buffer overflow in vp8 encoding in libvpx</issue>
  <issue tracker="bnc" id="1215776">VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 117.0.5938.132</issue>
  <issue tracker="cve" id="2023-5217"/>
  <issue tracker="cve" id="2023-5186"/>
  <issue tracker="cve" id="2023-5187"/>
  <packager>AndreasStieger</packager>
  <rating>critical</rating>
  <category>security</category>
  <summary>Security update for chromium</summary>
  <description>This update for chromium fixes the following issues:

- Chromium 117.0.5938.132 (boo#1215776):
  * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778)
  * CVE-2023-5186: Use after free in Passwords
  * CVE-2023-5187: Use after free in Extensions

- Chromium 117.0.5938.92:
  * stability improvements
</description>
</patchinfo>
openSUSE Build Service is sponsored by