Linux · openSUSE Leap · Security advisory · August 18, 2024

OPENSUSE-SU-2024:0254-2: Security update for 3 packages

OPENSUSE-SU-2024:0254-2, released August 18, 2024, fixes 25 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
25
None rated Critical
Exploited
0
None reported
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0104
64th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 0 High 16 Routine 9

Fixed package versions

ProductReleaseFixed in
chromiumopensuse-leap 15.6127.0.6533.119-bp156.2.14.1
gnopensuse-leap 15.60.20240730-bp156.2.3.1
rust-bindgenopensuse-leap 15.60.69.1-bp156.2.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-7532 Chromium: CVE-2024-7533 Use after free in Sharing9.6 0.0104 None reported
High CVE-2024-6990 Chromium: CVE-2024-6990 Uninitialized Use in Dawn8.8 0.0092 None reported
High CVE-2024-7534 Chromium: CVE-2024-7535 Inappropriate implementation in V88.8 0.0077 None reported
High CVE-2024-7255 Chromium: CVE-2024-7255 Out of bounds read in WebTransport8.8 0.0075 None reported
High CVE-2024-7533 Chromium: CVE-2024-7534 Heap buffer overflow in Layout8.8 0.0071 None reported
High CVE-2024-7550 Chromium: CVE-2024-7532 Out of bounds memory access in ANGLE8.8 0.0071 None reported
High CVE-2024-7535 Chromium: CVE-2024-7536 Use after free in WebAudio8.8 0.0071 None reported
High CVE-2024-7536 Chromium: CVE-2024-7550 Type Confusion in V88.8 0.0068 None reported
High CVE-2024-6989 Chromium: CVE-2024-6989 Use after free in Loader8.8 0.0064 None reported
High CVE-2024-6991 Chromium: CVE-2024-6991 Use after free in Dawn8.8 0.0064 None reported
High CVE-2024-6988 Chromium: CVE-2024-6988 Use after free in Downloads8.8 0.0064 None reported
High CVE-2024-6994 Chromium: CVE-2024-6994 Heap buffer overflow in Layout8.8 0.0063 None reported
High CVE-2024-6997 Chromium: CVE-2024-6997 Use after free in Tabs8.8 0.0062 None reported
High CVE-2024-6998 Chromium: CVE-2024-6998 Use after free in User Education8.8 0.0062 None reported
High CVE-2024-7000 Chromium: CVE-2024-7000 Use after free in CSS8.8 0.0059 None reported
High CVE-2024-7256 Chromium: CVE-2024-7256 Insufficient data validation in Dawn8.8 0.0059 None reported
Routine CVE-2024-6995 Chromium: CVE-2024-6995 Inappropriate implementation in Fullscreen4.7 0.0058 None reported
Routine CVE-2024-7003 Chromium: CVE-2024-7003 Inappropriate implementation in FedCM4.3 0.0052 None reported
Routine CVE-2024-6999 Chromium: CVE-2024-6999 Inappropriate implementation in FedCM4.3 0.0049 None reported
Routine CVE-2024-7001 Chromium: CVE-2024-7001 Inappropriate implementation in HTML4.3 0.0049 None reported
Routine CVE-2024-7005 Chromium: CVE-2024-7005 Insufficient validation of untrusted input in Safe Browsing4.3 0.0049 None reported
Routine CVE-2024-7004 Chromium: CVE-2024-7004 Insufficient validation of untrusted input in Safe Browsing4.3 0.0043 None reported
Routine CVE-2024-6996 Chromium: CVE-2024-6996 Race in Frames3.1 0.0043 None reported
Routine CVE-2024-6992 chromium: This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) *...n/a n/a None reported
Routine CVE-2024-6993 chromium: This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) *...n/a n/a None reported
Showing 1 to 25 of 25 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.