{"schemaVersion":3,"id":"OPENSUSE-SU-2023:0234-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for chromium\n\nThis update for chromium fixes the following issues:\n\nChromium 116.0.5845.96\n\n* New CSS features: Motion Path, and 'display' and\n  'content-visibility' animations\n* Web APIs: AbortSignal.any(), BYOB support for Fetch, Back/\n  forward cache NotRestoredReason API, Document Picture-in-\n  Picture, Expanded Wildcards in Permissions Policy Origins,\n  FedCM bundle: Login Hint API, User Info API, and RP Context API,\n  Non-composed Mouse and Pointer enter/leave events,\n  Remove document.open sandbox inheritance,\n  Report Critical-CH caused restart in NavigationTiming\n\nThis update fixes a number of security issues (boo#1214301):\n\n  * CVE-2023-2312: Use after free in Offline\n  * CVE-2023-4349: Use after free in Device Trust Connectors\n  * CVE-2023-4350: Inappropriate implementation in Fullscreen\n  * CVE-2023-4351: Use after free in Network\n  * CVE-2023-4352: Type Confusion in V8\n  * CVE-2023-4353: Heap buffer overflow in ANGLE\n  * CVE-2023-4354: Heap buffer overflow in Skia\n  * CVE-2023-4355: Out of bounds memory access in V8\n  * CVE-2023-4356: Use after free in Audio\n  * CVE-2023-4357: Insufficient validation of untrusted input in XML\n  * CVE-2023-4358: Use after free in DNS\n  * CVE-2023-4359: Inappropriate implementation in App Launcher\n  * CVE-2023-4360: Inappropriate implementation in Color\n  * CVE-2023-4361: Inappropriate implementation in Autofill\n  * CVE-2023-4362: Heap buffer overflow in Mojom IDL\n  * CVE-2023-4363: Inappropriate implementation in WebShare\n  * CVE-2023-4364: Inappropriate implementation in Permission Prompts\n  * CVE-2023-4365: Inappropriate implementation in Fullscreen\n  * CVE-2023-4366: Use after free in Extensions\n  * CVE-2023-4367: Insufficient policy enforcement in Extensions API\n  * CVE-2023-4368: Insufficient policy enforcement in Extensions API\n\n- Fix crash with extensions (boo#1214003)","dates":{"published":"2023-08-21T09:53:00.000Z","modified":"2026-02-04T04:01:20.458Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"chromium&distro=openSUSE Leap 15.4","name":"chromium","label":"chromium&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/chromium&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 116.0.5845.96-bp155.2.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 116.0.5845.96-bp155.2.19.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"chromium&distro=openSUSE Leap 15.5","name":"chromium","label":"chromium&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/chromium&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 116.0.5845.96-bp155.2.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 116.0.5845.96-bp155.2.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"chromium&distro=SUSE Package Hub 15 SP4","name":"chromium","label":"chromium&distro=SUSE Package Hub 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/chromium&distro=SUSE Package Hub 15 SP4","purlType":"rpm","versions":[{"text":"< 116.0.5845.96-bp155.2.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 116.0.5845.96-bp155.2.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"chromium&distro=SUSE Package Hub 15 SP5","name":"chromium","label":"chromium&distro=SUSE Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/chromium&distro=SUSE Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 116.0.5845.96-bp155.2.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 116.0.5845.96-bp155.2.19.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BHGOO7OFVF75LWZYDKQO5H6ZBGN5JVTX/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1214003","label":"bugzilla.suse.com/1214003","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1214301","label":"bugzilla.suse.com/1214301","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2312","label":"www.suse.com/security/cve/CVE-2023-2312","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4349","label":"www.suse.com/security/cve/CVE-2023-4349","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4350","label":"www.suse.com/security/cve/CVE-2023-4350","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4351","label":"www.suse.com/security/cve/CVE-2023-4351","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4352","label":"www.suse.com/security/cve/CVE-2023-4352","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4353","label":"www.suse.com/security/cve/CVE-2023-4353","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4354","label":"www.suse.com/security/cve/CVE-2023-4354","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4355","label":"www.suse.com/security/cve/CVE-2023-4355","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4356","label":"www.suse.com/security/cve/CVE-2023-4356","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4357","label":"www.suse.com/security/cve/CVE-2023-4357","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4358","label":"www.suse.com/security/cve/CVE-2023-4358","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4359","label":"www.suse.com/security/cve/CVE-2023-4359","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4360","label":"www.suse.com/security/cve/CVE-2023-4360","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4361","label":"www.suse.com/security/cve/CVE-2023-4361","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4362","label":"www.suse.com/security/cve/CVE-2023-4362","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4363","label":"www.suse.com/security/cve/CVE-2023-4363","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4364","label":"www.suse.com/security/cve/CVE-2023-4364","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4365","label":"www.suse.com/security/cve/CVE-2023-4365","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4366","label":"www.suse.com/security/cve/CVE-2023-4366","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4367","label":"www.suse.com/security/cve/CVE-2023-4367","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4368","label":"www.suse.com/security/cve/CVE-2023-4368","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2023-2312","CVE-2023-4349","CVE-2023-4350","CVE-2023-4351","CVE-2023-4352","CVE-2023-4353","CVE-2023-4354","CVE-2023-4355","CVE-2023-4356","CVE-2023-4357","CVE-2023-4358","CVE-2023-4359","CVE-2023-4360","CVE-2023-4361","CVE-2023-4362","CVE-2023-4363","CVE-2023-4364","CVE-2023-4365","CVE-2023-4366","CVE-2023-4367","CVE-2023-4368"],"downstream":[],"duplicates":[],"related":["CVE-2023-2312","CVE-2023-4349","CVE-2023-4350","CVE-2023-4351","CVE-2023-4352","CVE-2023-4353","CVE-2023-4354","CVE-2023-4355","CVE-2023-4356","CVE-2023-4357","CVE-2023-4358","CVE-2023-4359","CVE-2023-4360","CVE-2023-4361","CVE-2023-4362","CVE-2023-4363","CVE-2023-4364","CVE-2023-4365","CVE-2023-4366","CVE-2023-4367","CVE-2023-4368"]},"timeline":[{"kind":"published","date":"2023-08-21T09:53:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:01:20.458Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T06:56:53.962Z","stale":false,"partial":false}}