openSUSE-SU-2024:0302-1: important: Security update for chromium
openSUSE-SU-2024:0304-1: moderate: Security update for htmldoc
openSUSE-SU-2024:0303-1: moderate: Security update for htmldoc
openSUSE-SU-2024:0302-1: important: Security update for chromium
openSUSE Security Update: Security update for chromium
_______________________________
Announcement ID: openSUSE-SU-2024:0302-1
Rating: important
References: #1230391
Cross-References: CVE-2024-8636 CVE-2024-8637 CVE-2024-8638
CVE-2024-8639
Affected Products:
openSUSE Backports SLE-15-SP5
openSUSE Backports SLE-15-SP6
_______________________________
An update that fixes four vulnerabilities is now available.
Description:
This update for chromium fixes the following issues:
Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
* CVE-2024-8636: Heap buffer overflow in Skia
* CVE-2024-8637: Use after free in Media Router
* CVE-2024-8638: Type Confusion in V8
* CVE-2024-8639: Use after free in Autofill
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2024-302=1
- openSUSE Backports SLE-15-SP5:
zypper in -t patch openSUSE-2024-302=1
Package List:
- openSUSE Backports SLE-15-SP6 (aarch64 x86_64):
chromedriver-128.0.6613.137-bp156.2.26.1
chromedriver-debuginfo-128.0.6613.137-bp156.2.26.1
chromium-128.0.6613.137-bp156.2.26.1
chromium-debuginfo-128.0.6613.137-bp156.2.26.1
- openSUSE Backports SLE-15-SP5 (aarch64 x86_64):
chromedriver-128.0.6613.137-bp155.2.114.1
chromium-128.0.6613.137-bp155.2.114.1
References:
https://www.suse.com/security/cve/CVE-2024-8636.html
https://www.suse.com/security/cve/CVE-2024-8637.html
https://www.suse.com/security/cve/CVE-2024-8638.html
https://www.suse.com/security/cve/CVE-2024-8639.html
https://bugzilla.suse.com/1230391
openSUSE-SU-2024:0304-1: moderate: Security update for htmldoc
openSUSE Security Update: Security update for htmldoc
_______________________________
Announcement ID: openSUSE-SU-2024:0304-1
Rating: moderate
References: #1230022
Cross-References: CVE-2024-45508
Affected Products:
openSUSE Backports SLE-15-SP5
_______________________________
An update that fixes one vulnerability is now available.
Description:
This update for htmldoc fixes the following issues:
- CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in
ps-pdf.cxx because of an attempt to strip leading whitespace from a
whitespace-only node [boo#1230022].
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP5:
zypper in -t patch openSUSE-2024-304=1
Package List:
- openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64):
htmldoc-1.9.16-bp155.2.3.1
References:
https://www.suse.com/security/cve/CVE-2024-45508.html
https://bugzilla.suse.com/1230022
openSUSE-SU-2024:0303-1: moderate: Security update for htmldoc
openSUSE Security Update: Security update for htmldoc
_______________________________
Announcement ID: openSUSE-SU-2024:0303-1
Rating: moderate
References: #1230022
Cross-References: CVE-2024-45508
Affected Products:
openSUSE Backports SLE-15-SP6
_______________________________
An update that fixes one vulnerability is now available.
Description:
This update for htmldoc fixes the following issues:
- CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in
ps-pdf.cxx because of an attempt to strip leading whitespace from a
whitespace-only node [boo#1230022].
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2024-303=1
Package List:
- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64):
htmldoc-1.9.16-bp156.3.3.1
References:
https://www.suse.com/security/cve/CVE-2024-45508.html
https://bugzilla.suse.com/1230022
