# OPENSUSE-SU-2024:0254-2: Security update for 3 packages OPENSUSE-SU-2024:0254-2, released August 18, 2024, fixes 25 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2024-0254-2 - Platform: Linux - Released: Aug 18, 2024 - Priority: High (Closes CVE-2024-7532, high severity) - CVEs: 25, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2024:0254-2 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 15.6 | 127.0.6533.119-bp156.2.14.1 | | [gn](https://patchblox.com/security/data/product/linux/gn.md) | opensuse-leap 15.6 | 0.20240730-bp156.2.3.1 | | [rust-bindgen](https://patchblox.com/security/data/product/linux/rust-bindgen.md) | opensuse-leap 15.6 | 0.69.1-bp156.2.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-7532](https://patchblox.com/security/data/cve/CVE-2024-7532.md) | High | Chromium: CVE-2024-7533 Use after free in Sharing | 9.6 | 0.0104 | | | [CVE-2024-6990](https://patchblox.com/security/data/cve/CVE-2024-6990.md) | High | Chromium: CVE-2024-6990 Uninitialized Use in Dawn | 8.8 | 0.0092 | | | [CVE-2024-7534](https://patchblox.com/security/data/cve/CVE-2024-7534.md) | High | Chromium: CVE-2024-7535 Inappropriate implementation in V8 | 8.8 | 0.0077 | | | [CVE-2024-7255](https://patchblox.com/security/data/cve/CVE-2024-7255.md) | High | Chromium: CVE-2024-7255 Out of bounds read in WebTransport | 8.8 | 0.0075 | | | [CVE-2024-7533](https://patchblox.com/security/data/cve/CVE-2024-7533.md) | High | Chromium: CVE-2024-7534 Heap buffer overflow in Layout | 8.8 | 0.0071 | | | [CVE-2024-7550](https://patchblox.com/security/data/cve/CVE-2024-7550.md) | High | Chromium: CVE-2024-7532 Out of bounds memory access in ANGLE | 8.8 | 0.0071 | | | [CVE-2024-7535](https://patchblox.com/security/data/cve/CVE-2024-7535.md) | High | Chromium: CVE-2024-7536 Use after free in WebAudio | 8.8 | 0.0071 | | | [CVE-2024-7536](https://patchblox.com/security/data/cve/CVE-2024-7536.md) | High | Chromium: CVE-2024-7550 Type Confusion in V8 | 8.8 | 0.0068 | | | [CVE-2024-6989](https://patchblox.com/security/data/cve/CVE-2024-6989.md) | High | Chromium: CVE-2024-6989 Use after free in Loader | 8.8 | 0.0064 | | | [CVE-2024-6991](https://patchblox.com/security/data/cve/CVE-2024-6991.md) | High | Chromium: CVE-2024-6991 Use after free in Dawn | 8.8 | 0.0064 | | | [CVE-2024-6988](https://patchblox.com/security/data/cve/CVE-2024-6988.md) | High | Chromium: CVE-2024-6988 Use after free in Downloads | 8.8 | 0.0064 | | | [CVE-2024-6994](https://patchblox.com/security/data/cve/CVE-2024-6994.md) | High | Chromium: CVE-2024-6994 Heap buffer overflow in Layout | 8.8 | 0.0063 | | | [CVE-2024-6997](https://patchblox.com/security/data/cve/CVE-2024-6997.md) | High | Chromium: CVE-2024-6997 Use after free in Tabs | 8.8 | 0.0062 | | | [CVE-2024-6998](https://patchblox.com/security/data/cve/CVE-2024-6998.md) | High | Chromium: CVE-2024-6998 Use after free in User Education | 8.8 | 0.0062 | | | [CVE-2024-7000](https://patchblox.com/security/data/cve/CVE-2024-7000.md) | High | Chromium: CVE-2024-7000 Use after free in CSS | 8.8 | 0.0059 | | | [CVE-2024-7256](https://patchblox.com/security/data/cve/CVE-2024-7256.md) | High | Chromium: CVE-2024-7256 Insufficient data validation in Dawn | 8.8 | 0.0059 | | | [CVE-2024-6995](https://patchblox.com/security/data/cve/CVE-2024-6995.md) | Routine | Chromium: CVE-2024-6995 Inappropriate implementation in Fullscreen | 4.7 | 0.0058 | | | [CVE-2024-7003](https://patchblox.com/security/data/cve/CVE-2024-7003.md) | Routine | Chromium: CVE-2024-7003 Inappropriate implementation in FedCM | 4.3 | 0.0052 | | | [CVE-2024-6999](https://patchblox.com/security/data/cve/CVE-2024-6999.md) | Routine | Chromium: CVE-2024-6999 Inappropriate implementation in FedCM | 4.3 | 0.0049 | | | [CVE-2024-7001](https://patchblox.com/security/data/cve/CVE-2024-7001.md) | Routine | Chromium: CVE-2024-7001 Inappropriate implementation in HTML | 4.3 | 0.0049 | | | [CVE-2024-7005](https://patchblox.com/security/data/cve/CVE-2024-7005.md) | Routine | Chromium: CVE-2024-7005 Insufficient validation of untrusted input in Safe Browsing | 4.3 | 0.0049 | | | [CVE-2024-7004](https://patchblox.com/security/data/cve/CVE-2024-7004.md) | Routine | Chromium: CVE-2024-7004 Insufficient validation of untrusted input in Safe Browsing | 4.3 | 0.0043 | | | [CVE-2024-6996](https://patchblox.com/security/data/cve/CVE-2024-6996.md) | Routine | Chromium: CVE-2024-6996 Race in Frames | 3.1 | 0.0043 | | | [CVE-2024-6992](https://patchblox.com/security/data/cve/CVE-2024-6992.md) | Routine | chromium: This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) *... | n/a | n/a | | | [CVE-2024-6993](https://patchblox.com/security/data/cve/CVE-2024-6993.md) | Routine | chromium: This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) *... | n/a | n/a | | --- Data as of 2026-11-09T19:38:12Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.